Kubeclient vulnerabilities
We track 1 vulnerability in Kubeclient products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 25, 2022.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest Kubeclient vulnerabilities
- 8.1 High severity
kubeclient: Improper Certificate Validation
A flaw was found in all versions of kubeclient up to (but not including) v4.9.3, the Ruby client for Kubernetes REST API, in the way it parsed kubeconfig files. When the kubeconfig file does not configure custom CA to verify certs, kubeclient ends up accepting