fabric8 kubernetes-client vulnerable 

fabric8 Kubernetes client had an arbitrary code execution flaw in versions 5.0.0-beta-1 and higher. Attackers could potentially insert malicious YAMLs due to misconfigured YAML parsing.

Vulnerability ID: GHSA-98g7-rxmf-rrxm
Aliases: CVE-2021-4178
Published: 2022-07-15 05:17:35
CWE: CWE-502
CWE-94
Severity rating: MODERATE
CVSS: type: CVSS_V3
score: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected packages:
package: ecosystem: Maven
name: io.fabric8:kubernetes-client
package: ecosystem: Maven
name: io.fabric8:kubernetes-client
package: ecosystem: Maven
name: io.fabric8:kubernetes-client
package: ecosystem: Maven
name: io.fabric8:kubernetes-client
package: ecosystem: Maven
name: io.fabric8:kubernetes-client
package: ecosystem: Maven
name: io.fabric8:kubernetes-client
package: ecosystem: Maven
name: io.fabric8:kubernetes-client