Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-15687 1 Kubernetes 1 Java 2026-07-30 N/A
A security issue was discovered in the Kubernetes Java client library where a compromised pod may be able to create new files in arbitrary locations on the client machine executing copy operations via non-tar copyDirectoryFromPod when enableTarCompressing is false.
CVE-2021-25738 1 Kubernetes 1 Java 2024-11-21 6.7 Medium
Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution.
CVE-2020-8570 1 Kubernetes 1 Java 2024-11-21 9.1 Critical
Kubernetes Java client libraries in version 10.0.0 and versions prior to 9.0.1 allow writes to paths outside of the current directory when copying multiple files from a remote pod which sends a maliciously crafted archive. This can potentially overwrite any files on the system of the process executing the client code.