CVE-2021-25738

CVE-2021-25738: The vulnerability arises from loading specially crafted YAML via the Kubernetes Java Client library, enabling code execution. Connected documents consistently describe this YAML-loading path as the root cause and code execution outcome. The public data does not provide precise aff...

CVE-2020-8570

CVE-2020-8570: Kubernetes Java client libraries suffer a path traversal issue in the Copy implementation. Versions 10.0.0 and prior to 9.0.1 allow writes to paths outside the current directory when extracting multiple files from a malicious archive sent from a remote pod, potentially overwriting ...