CVE-2021-25743: Kubernetes
Low severity, CVSS 3.0. EPSS: 0.8% chance of exploitation in the next 30 days.
kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not limited to the unstructured string fields in objects such as Events.
Affected products
- Kubernetes Kubernetes: up to and including 1.25.0; version 1.26.0 only
Published 2022-01-07. Last modified 2026-06-17.