{"id":"CVE-2021-4178","details":"A arbitrary code execution flaw was found in the Fabric 8 Kubernetes client affecting versions 5.0.0-beta-1 and above. Due to an improperly configured YAML parsing, this will allow a local and privileged attacker to supply malicious YAML.","aliases":["GHSA-98g7-rxmf-rrxm"],"modified":"2026-07-08T06:27:45.168088668Z","published":"2022-08-24T16:15:09.770Z","database_specific":{"unresolved_ranges":[{"vendor_product":"redhat:a-mq_streams","cpes":["cpe:2.3:a:redhat:a-mq_streams:2.0.1:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"2.0.1"},{"last_affected":"2.0.1"}],"source":"CPE_STRING"},{"vendor_product":"redhat:build_of_quarkus","cpes":["cpe:2.3:a:redhat:build_of_quarkus:2.2.5:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"2.2.5"},{"last_affected":"2.2.5"}],"source":"CPE_STRING"},{"source":"CPE_STRING","vendor_product":"redhat:descision_manager","cpes":["cpe:2.3:a:redhat:descision_manager:7.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.0"},{"last_affected":"7.0"}]},{"source":"CPE_STRING","vendor_product":"redhat:fabric8-kubernetes","cpes":["cpe:2.3:a:redhat:fabric8-kubernetes:5.0.0:beta1:*:*:*:*:*:*"],"extracted_events":[{"introduced":"5.0.0-beta1"},{"last_affected":"5.0.0-beta1"}]},{"extracted_events":[{"introduced":"7.11"},{"last_affected":"7.11"}],"source":"CPE_STRING","vendor_product":"redhat:fuse","cpes":["cpe:2.3:a:redhat:fuse:7.11:*:*:*:*:*:*:*"]},{"cpes":["cpe:2.3:a:redhat:integration_camel_quarkus:2.2.1:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"2.2.1"},{"last_affected":"2.2.1"}],"source":"CPE_STRING","vendor_product":"redhat:integration_camel_quarkus"},{"extracted_events":[{"introduced":"7.0"},{"last_affected":"7.0"}],"source":"CPE_STRING","vendor_product":"redhat:process_automation","cpes":["cpe:2.3:a:redhat:process_automation:7.0:*:*:*:*:*:*:*"]}]},"references":[{"type":"ADVISORY","url":"https://access.redhat.com/security/cve/CVE-2021-4178"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-98g7-rxmf-rrxm"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2034388"},{"type":"REPORT","url":"https://github.com/fabric8io/kubernetes-client/issues/3653"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/fabric8io/kubernetes-client","events":[{"introduced":"f000ac9194723781fe8c9c24fcf5bf58498bb260"},{"fixed":"0fa9285f03abe2c8d27a551dc0a0192f7a68b61e"},{"introduced":"1a59e3bd1f5e63bf984f4f5bbdcbe376cf1704f1"},{"fixed":"bdcb8f7bfd905523b8b58fd4e3330a02dd82cbfb"},{"introduced":"faf7555f4f15681452ac3b42cce557e2e73ba7fa"},{"fixed":"930aa487f848cdb7ba9c3cf9fe4904c1a843179f"},{"introduced":"65d13c08b527495d658c94017c88de248110cb82"},{"fixed":"11a73980ed4a49e5bbe3e729414760fb5c8bcadc"},{"introduced":"5f5c8d3f76375ffc0bccfc3c4f417beaac031024"},{"fixed":"23db4301478e74dac7154af70907bf98f2936ff5"},{"introduced":"109675fc7f4d1fa84ea445ad369eb1261b76a0cf"},{"fixed":"5e096210f7236a1c7d4954c35b8d410eb98730aa"},{"introduced":"c1f843ca0effb2212cae34f6bdc09b6b1c29b09f"},{"last_affected":"c1f843ca0effb2212cae34f6bdc09b6b1c29b09f"}],"database_specific":{"source":["CPE_RANGE","CPE_STRING"],"cpe":["cpe:2.3:a:redhat:fabric8-kubernetes:*:*:*:*:*:*:*:*","cpe:2.3:a:redhat:fabric8-kubernetes:5.8.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"5.0.1"},{"fixed":"5.0.3"},{"introduced":"5.1.0"},{"fixed":"5.1.2"},{"introduced":"5.2.0"},{"fixed":"5.3.2"},{"introduced":"5.5.0"},{"fixed":"5.7.4"},{"introduced":"5.9.0"},{"fixed":"5.10.2"},{"introduced":"5.11.0"},{"fixed":"5.11.2"},{"introduced":"5.8.0"},{"last_affected":"5.8.0"}]}}],"versions":["5.8.0","v5.10.1","v5.11.1","v5.8.0","v5.7.3","v5.3.1","v5.1.1","v5.0.2","v5.11.0","v5.10.0","v5.9.0","v5.7.2","v5.7.1","v5.7.0","v5.6.0","v5.5.0","v5.3.0","v5.2.1","v5.2.0","v5.1.0","v5.0.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-4178.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"}]}