{"schema_version":"1.8.0","id":"CVE-2021-25743","published":"2022-01-07T00:15:07.817Z","modified":"2026-08-07T11:48:34.965706407Z","aliases":["GHSA-f9jg-8p32-2f55","GO-2022-0983"],"related":["CGA-g2xf-r675-cc5v","SUSE-SU-2024:2858-1","SUSE-SU-2024:2859-1","SUSE-SU-2024:2928-1","SUSE-SU-2024:3341-1","SUSE-SU-2024:3343-1","SUSE-SU-2025:02423-1","SUSE-SU-2025:02423-2","openSUSE-SU-2025:15424-1"],"details":"kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not limited to the unstructured string fields in objects such as Events.","affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/kubernetes/kubelet","events":[{"introduced":"0"},{"last_affected":"d37f045d808033445aaa284ad80454c948b37958"}],"database_specific":{"cpe":"cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"1.25.0"}],"source":"CPE_RANGE"}}],"versions":["v0.25.0","kubernetes-1.25.0","kubernetes-1.9.0-alpha.3","kubernetes-1.9.0-alpha.2","kubernetes-1.9.0-alpha.1","kubernetes-1.9.0-alpha.0","kubernetes-1.13.0-alpha.0","kubernetes-1.12.0-beta.0","kubernetes-1.12.0-alpha.1","kubernetes-1.12.0-alpha.0","kubernetes-1.11.0-alpha.2","kubernetes-1.11.0-alpha.1","kubernetes-1.11.0-alpha.0","kubernetes-1.10.0-alpha.3","kubernetes-1.10.0-alpha.2","kubernetes-1.10.0-alpha.1","kubernetes-1.10.0-alpha.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-25743.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/kubernetes/kubernetes","events":[{"introduced":"0"},{"last_affected":"a866cbe2e5bbaa01cfd5e969aa3e033f3282a8a2"}],"database_specific":{"cpe":"cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"1.25.0"}],"source":"CPE_RANGE"}}],"versions":["v1.25.0","v1.25.0-rc.1","v1.26.0-alpha.0","v1.25.0-rc.0","v1.25.0-beta.0","v1.25.0-alpha.3","v1.25.0-alpha.2","v1.25.0-alpha.0","v1.25.0-alpha.1","v1.24.0-beta.0","v1.24.0-alpha.4","v1.24.0-alpha.3","v1.24.0-alpha.2","v1.24.0-alpha.1","v1.24.0-alpha.0","v1.23.0-alpha.4","v1.23.0-alpha.3","v1.23.0-alpha.2","v1.23.0-alpha.1","v1.23.0-alpha.0","v1.22.0-beta.2","v1.22.0-beta.1","v1.22.0-beta.0","v1.22.0-alpha.3","v1.22.0-alpha.2","v1.22.0-alpha.1","v1.22.0-alpha.0","v1.21.0-beta.1","v1.21.0-beta.0","v1.21.0-alpha.3","v1.21.0-alpha.2","v1.21.0-alpha.1","v1.21.0-alpha.0","v1.20.0-beta.2","v1.20.0-beta.1","v1.20.0-beta.0","v1.20.0-alpha.3","v1.20.0-alpha.2","v1.20.0-alpha.1","v1.20.0-alpha.0","v1.19.0-beta.2","v1.19.0-beta.1","v1.19.0-beta.0","v1.19.0-alpha.3","v1.19.0-alpha.2","v1.19.0-alpha.1","v1.19.0-alpha.0","v1.18.0-alpha.5","v1.18.0-alpha.4","v1.18.0-alpha.2","v1.18.0-alpha.1","v1.18.0-alpha.0","v1.17.0-alpha.3","v1.17.0-alpha.1","v1.17.0-alpha.2","v1.17.0-alpha.0","v1.16.0-alpha.3","v1.16.0-alpha.2","v1.16.0-alpha.1","v1.16.0-alpha.0","v1.15.0-alpha.3","v1.15.0-alpha.2","v1.15.0-alpha.1","v1.14.0-alpha.3","v1.15.0-alpha.0","v1.14.0-alpha.2","v1.14.0-alpha.1","v1.14.0-alpha.0","v1.13.0-alpha.3","v1.13.0-alpha.2","v1.13.0-alpha.1","v1.13.0-alpha.0","v1.12.0-alpha.1","v1.12.0-alpha.0","v1.11.0-alpha.2","v1.11.0-alpha.1","v1.11.0-alpha.0","v1.10.0-alpha.3","v1.10.0-alpha.2","v1.10.0-alpha.1","v1.9.0-alpha.3","v1.10.0-alpha.0","v1.9.0-alpha.2","v1.9.0-alpha.1","v1.9.0-alpha.0","v1.8.0-alpha.3","v1.8.0-alpha.2","v1.8.0-alpha.0","v1.8.0-alpha.1","v1.7.0-alpha.4","v1.7.0-alpha.3","v1.7.0-alpha.2","v1.7.0-alpha.1","v1.7.0-alpha.0","v1.6.0-alpha.3","v1.6.0-alpha.2","v1.6.0-alpha.1","v1.6.0-alpha.0","v1.5.0-alpha.2","v1.5.0-alpha.1","v1.5.0-alpha.0","v1.4.0-alpha.3","v1.4.0-alpha.1","v1.4.0-alpha.2","v1.3.0-alpha.5","v1.3.0-alpha.4","v1.3.0-alpha.3","v1.3.0-alpha.1","v1.3.0-alpha.2","v1.3.0-alpha.0","v1.2.0-alpha.8","v1.2.0-alpha.7","v1.2.0-alpha.6","v1.2.0-alpha.5","v1.2.0-alpha.4","v1.2.0-alpha.3","v1.2.0-alpha.2","v1.2.0-alpha.1","v1.1.0-alpha.1","v1.1.0-alpha.0","v0.17.0","v0.13.1-dev"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-25743.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/kubernetes/kubernetes/issues/101695"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20220217-0003/"}],"database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:a:kubernetes:kubernetes:1.26.0:alpha0:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.26.0:alpha1:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.26.0:alpha2:*:*:*:*:*:*"],"extracted_events":[{"introduced":"1.26.0-alpha0"},{"last_affected":"1.26.0-alpha0"},{"introduced":"1.26.0-alpha0"},{"last_affected":"1.26.0-alpha0"},{"introduced":"1.26.0-alpha1"},{"last_affected":"1.26.0-alpha1"},{"introduced":"1.26.0-alpha1"},{"last_affected":"1.26.0-alpha1"},{"introduced":"1.26.0-alpha2"},{"last_affected":"1.26.0-alpha2"},{"introduced":"1.26.0-alpha2"},{"last_affected":"1.26.0-alpha2"}],"source":"CPE_STRING","vendor_product":"kubernetes:kubernetes"}]},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N"}]}