CVE-2021-25738: Kubernetes Java

Medium severity, CVSS 6.7. EPSS: 0.5% chance of exploitation in the next 30 days.

Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution.

Affected products

  • Kubernetes Java: up to and including 9.0.2; from 10.0.0, up to and including 10.0.1; from 11.0.0, before 11.0.1 (fixed in 11.0.1)

Published 2021-10-11. Last modified 2026-06-17.