Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

fabric8io/kubernetes-client

              main @ 45be75f
            

Fixes

CVEs

HIGH

Peak severity

64.0%

Coverage

Highlights

Path Traversal: 4 prior fixes. Scrutinize any change in this area.

openshift-client/src/main/java/io/fabric8/openshift/client/internal/OpenShiftOAuthInterceptor.java: most-fixed (4 issues). Treat as high-risk during review.

22 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Path Traversal: Multiple tar extraction/creation paths failed to validate entry names, allowing writes outside the destination directory.

Command Injection: Shell commands and exec parameters were built without proper quoting/encoding, enabling injection via crafted paths or command strings.

TLS Certificate Validation Bypass / TLS Downgrade: WebSocket and HTTP clients inconsistently applied custom trust stores and allowed weak TLS protocols, enabling MITM and downgrade attacks.