Description
A security issue was discovered in the Kubernetes Java client library where a compromised pod may be able to create new files in arbitrary locations on the client machine executing copy operations via non-tar copyDirectoryFromPod when enableTarCompressing is false.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Kubernetes kubernetes-client/java
Default version status: unaffected
10.0.0 to < 25.0.1affected26.0.0affected25.0.1unaffected26.0.1unaffected27.0.0unaffected