{"id":"CVE-2021-25743","aliases":["DEBIAN-CVE-2021-25743","EUVD-2022-0579","GHSA-f9jg-8p32-2f55","GO-2022-0983","OESA-2022-2132","OESA-2023-1020","SUSE-SU-2024:2858-1","SUSE-SU-2024:2859-1","SUSE-SU-2024:2928-1","SUSE-SU-2024:3341-1","SUSE-SU-2024:3343-1","SUSE-SU-2025:02423-1","SUSE-SU-2025:02423-2","UBUNTU-CVE-2021-25743","openSUSE-SU-2025:15424-1"],"status":"published","title":"ANSI escape characters in kubectl output are not being filtered","description":"kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not limited to the unstructured string fields in objects such as Events.","severity":{"version":"3.1","score":3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00844,"percentile":0.58457,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-150"],"published":"2022-01-07T00:00:12Z","modified":"2026-10-24T10:47:17Z","fixes":[{"ecosystem":"Go","package":"k8s.io/kubernetes","fixed_in":["1.26.0-alpha.3"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"kubernetes","fixed_in":["1.20.5+really1.20.2-1.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"kubernetes","fixed_in":["1.31.4+ds-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"kubernetes","fixed_in":["1.31.4+ds-1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"kubernetes","fixed_in":["1.20.2-15.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"kubernetes","fixed_in":["1.20.2-15.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"kubernetes","fixed_in":["1.20.2-15.oe2203"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"kubernetes","fixed_in":["1.20.2-16.oe2203sp1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP5","package":"kubernetes1.23","fixed_in":["1.23.17-150500.3.15.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"kubernetes1.23","fixed_in":["1.23.17-150500.3.15.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"kubernetes1.23","fixed_in":["1.23.17-150500.3.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP5","package":"kubernetes1.24","fixed_in":["1.24.17-150500.3.19.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"kubernetes1.24","fixed_in":["1.24.17-150500.3.19.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"kubernetes1.24","fixed_in":["1.24.17-150500.3.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP5","package":"kubernetes1.25","fixed_in":["1.25.16-150400.9.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP6","package":"kubernetes1.25","fixed_in":["1.25.16-150400.9.10.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"kubernetes1.25","fixed_in":["1.25.16-150400.9.10.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"kubernetes1.25","fixed_in":["1.25.16-150400.9.10.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Go","package":"k8s.io/kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.0-alpha.3"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.5+really1.20.2-1.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.31.4+ds-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.31.4+ds-1"}]}]},{"source":"osv","ecosystem":"Go","package":"k8s.io/kubernetes","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.26.0-alpha.3"}]}]},{"source":"osv","ecosystem":"Go","package":"k8s.io/kubernetes","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.26.0-alpha.3"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.2-15.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.2-15.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.2-15.oe2203"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.2-16.oe2203sp1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP5","package":"kubernetes1.23","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.17-150500.3.15.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kubernetes1.23","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.17-150500.3.15.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"kubernetes1.23","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.17-150500.3.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP5","package":"kubernetes1.24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.17-150500.3.19.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kubernetes1.24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.17-150500.3.19.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"kubernetes1.24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.17-150500.3.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP5","package":"kubernetes1.25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.16-150400.9.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP6","package":"kubernetes1.25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.16-150400.9.10.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kubernetes1.25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.16-150400.9.10.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"kubernetes1.25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.16-150400.9.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"kubernetes1.24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.17-150400.9.16.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"kubernetes1.24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.17-150400.9.16.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"kubernetes1.24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.17-150400.9.16.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"kubernetes1.24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.17-150400.9.16.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"kubernetes1.24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.17-150300.7.6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"kubernetes1.24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.17-150300.7.6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"kubernetes1.24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.17-150300.7.6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"kubernetes1.24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.17-150300.7.6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"kubernetes1.23","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.17-150300.7.12.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"kubernetes1.23","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.17-150300.7.12.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"kubernetes1.23","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.17-150300.7.12.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"kubernetes1.23","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.17-150300.7.12.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"kubernetes1.23","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.17-150300.7.12.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"kubernetes1.23","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.17-150300.7.12.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"kubernetes1.23","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.17-150300.7.12.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"kubernetes1.23","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.17-150300.7.12.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"govulncheck-vulndb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.20250807T150727-1.1"}]}],"bundled":44}],"products":[{"vendor":"kubernetes","product":"kubernetes"}],"references":[{"url":"https://github.com/kubernetes/kubernetes/issues/101695","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","advisory","web","report"]},{"url":"https://security.netapp.com/advisory/ntap-20220217-0003/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-25743","tags":["advisory"]},{"url":"https://github.com/kubernetes/kubernetes/pull/112553","tags":["web"]},{"url":"https://github.com/kubernetes/kubernetes/commit/dad0e937c0f76344363eb691b2668490ffef8537","tags":["web"]},{"url":"https://github.com/advisories/GHSA-f9jg-8p32-2f55","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-25743","tags":["advisory"]},{"url":"https://github.com/kubernetes/kubernetes","tags":["package"]},{"url":"https://security.netapp.com/advisory/ntap-20220217-0003","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-2132","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1020","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242858-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1194400","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-25743","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242859-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242928-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243341-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1062303","tags":["report"]},{"url":"https://bugzilla.suse.com/1211630","tags":["report"]},{"url":"https://bugzilla.suse.com/1211631","tags":["report"]},{"url":"https://bugzilla.suse.com/1214406","tags":["report"]},{"url":"https://bugzilla.suse.com/1216109","tags":["report"]},{"url":"https://bugzilla.suse.com/1216123","tags":["report"]},{"url":"https://bugzilla.suse.com/1219964","tags":["report"]},{"url":"https://bugzilla.suse.com/1221400","tags":["report"]},{"url":"https://bugzilla.suse.com/1222539","tags":["report"]},{"url":"https://bugzilla.suse.com/1226136","tags":["report"]},{"url":"https://bugzilla.suse.com/1229858","tags":["report"]},{"url":"https://bugzilla.suse.com/1229867","tags":["report"]},{"url":"https://bugzilla.suse.com/1229869","tags":["report"]},{"url":"https://bugzilla.suse.com/1230323","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2727","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-39325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-44487","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-45288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0793","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-24786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3177","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243343-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502423-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1212493","tags":["report"]},{"url":"https://bugzilla.suse.com/1229008","tags":["report"]},{"url":"https://bugzilla.suse.com/1241865","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22872","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502423-2/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-25743","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-25743","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7561","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000056","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1002102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1002100","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1002101","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16733","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19184","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1002100","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1002101","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11245","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11251","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11253","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26240","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8555","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8557","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8558","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8562","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8563","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-25735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-25736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-25737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-25741","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-30465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29162","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3162","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3294","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-27561","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28642","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5528","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45310","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-5321","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-47908","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2021-25743","title":"ANSI escape characters in kubectl output are not being filtered","description":"kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not limited to the unstructured string fields in objects such as Events.","status":"published","published":"2022-01-07T00:00:12.399Z","modified":"2024-09-16T23:51:24.348Z","cvss":[{"version":"3.1","score":3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N","level":"low","assessor":"cna"}],"cwes":["CWE-150"],"updated_at":"2026-11-02T14:32:59.430294Z"}],"euvd":[{"id":"EUVD-2022-0579","description":"kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not limited to the unstructured string fields in objects such as Events.","status":"published","published":"2022-01-07T00:00:12Z","modified":"2024-09-16T23:51:24Z","cvss":[{"version":"3.1","score":3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-03T00:29:04.415682Z"}],"ghsa":[{"id":"GHSA-f9jg-8p32-2f55","title":"kubectl ANSI escape characters not filtered","description":"kubectl (k8s.io/kubernetes/pkg/kubectl) does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not limited to the unstructured string fields in objects such as Events.","status":"published","published":"2022-01-08T00:00:21Z","modified":"2023-10-02T15:53:14Z","cvss":[{"version":"3.1","score":3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N","level":"low"}],"cwes":["CWE-150"],"updated_at":"2026-11-02T14:37:07.641671Z"}],"nvd":[{"id":"CVE-2021-25743","description":"kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not limited to the unstructured string fields in objects such as Events.","status":"published","published":"2022-01-07T00:15:07.817Z","modified":"2026-06-17T03:42:23.367Z","cvss":[{"version":"3.1","score":3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N","level":"low","assessor":"secondary"},{"version":"3.1","score":3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N","level":"low","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:N/AC:H/Au:S/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-150"],"updated_at":"2026-11-02T14:07:03.418194Z"}],"osv":[{"id":"CVE-2021-25743","description":"kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not limited to the unstructured string fields in objects such as Events.","status":"published","published":"2022-01-07T00:15:07.817Z","modified":"2026-10-24T10:47:17.492123298Z","cvss":[{"version":"3.1","score":3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:44:18.778776Z"},{"id":"DEBIAN-CVE-2021-25743","description":"kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not limited to the unstructured string fields in objects such as Events.","status":"published","published":"2022-01-07T00:15:07.817Z","modified":"2026-10-23T18:02:41.038339353Z","cvss":[{"version":"3.1","score":3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:45:34.637046Z"},{"id":"GHSA-f9jg-8p32-2f55","title":"kubectl ANSI escape characters not filtered","description":"kubectl (k8s.io/kubernetes/pkg/kubectl) does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not limited to the unstructured string fields in objects such as Events.","status":"published","published":"2022-01-08T00:00:21Z","modified":"2026-09-10T03:49:10.75989121Z","cvss":[{"version":"3.1","score":3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N","level":"low"}],"cwes":["CWE-150"],"updated_at":"2026-11-02T15:46:46.39441Z"},{"id":"OESA-2022-2132","title":"kubernetes security update","description":"Container cluster management.\r\n\r\nSecurity Fix(es):\r\n\r\nkubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not limited to the unstructured string fields in objects such as Events.(CVE-2021-25743)","status":"published","published":"2022-12-09T11:05:27Z","modified":"2026-08-18T01:17:27.012317003Z","cvss":[{"version":"3.1","score":3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"OESA-2023-1020","title":"kubernetes security update","description":"Container cluster management.\r\n\r\nSecurity Fix(es):\r\n\r\nkubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not limited to the unstructured string fields in objects such as Events.(CVE-2021-25743)","status":"published","published":"2023-01-06T11:05:30Z","modified":"2026-08-18T01:17:29.967587837Z","cvss":[{"version":"3.1","score":3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"UBUNTU-CVE-2021-25743","description":"kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not limited to the unstructured string fields in objects such as Events.","status":"withdrawn","published":"2022-01-07T00:15:00Z","modified":"2025-07-14T06:34:32.594277Z","cvss":[{"version":"3.1","score":3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N","level":"low"},{"version":"3.1","score":3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:54:26.779273Z"},{"id":"GO-2022-0983","title":"ANSI escape characters not filtered in kubectl in k8s.io/kubernetes","description":"ANSI escape characters not filtered in kubectl in k8s.io/kubernetes","status":"published","published":"2024-08-21T16:03:21Z","modified":"2026-02-04T04:32:39.99891Z","updated_at":"2026-11-02T15:47:00.918515Z"},{"id":"openSUSE-SU-2025:15424-1","title":"govulncheck-vulndb-0.0.20250807T150727-1.1 on GA media","description":"These are all security issues fixed in the govulncheck-vulndb-0.0.20250807T150727-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-08-08T00:00:00Z","modified":"2026-03-23T04:53:45.821911Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"SUSE-SU-2024:2858-1","title":"Security update for kubernetes1.23","description":"This update for kubernetes1.23 fixes the following issues:\n\n- CVE-2021-25743: Fixed sanitization of raw data of escape, meta or control sequences before output it to terminal (bsc#1194400)\n","status":"published","published":"2024-08-08T14:20:13Z","modified":"2026-02-04T02:36:10.942747Z","updated_at":"2026-11-02T15:53:55.136363Z"},{"id":"SUSE-SU-2024:2859-1","title":"Security update for kubernetes1.24","description":"This update for kubernetes1.24 fixes the following issues:\n  \n- CVE-2021-25743: Fixed sanitization of raw data of escape, meta or control sequences before output it to terminal (bsc#1194400)\n","status":"published","published":"2024-08-08T14:20:41Z","modified":"2026-02-04T02:16:19.700337Z","updated_at":"2026-11-02T15:53:55.136363Z"},{"id":"SUSE-SU-2024:2928-1","title":"Security update for kubernetes1.25","description":"This update for kubernetes1.25 fixes the following issues:\n\n- CVE-2021-25743: Fixed sanitization of raw data of escape, meta or control sequences before output it to terminal (bsc#1194400)\n\nOther fixes:\n- Included kubernetes1.25-client package. (jsc#PED-5755)\n","status":"published","published":"2024-08-15T07:56:18Z","modified":"2026-02-04T03:48:42.487502Z","updated_at":"2026-11-02T15:53:55.136363Z"},{"id":"SUSE-SU-2024:3341-1","title":"Security update for kubernetes1.23","description":"This update for kubernetes1.23 fixes the following issues:\n\n- CVE-2021-25743: escape, meta and control sequences in raw data output to terminal not neutralized. (bsc#1194400)\n- CVE-2023-2727: bypass of policies imposed by the ImagePolicyWebhook admission plugin. (bsc#1211630)\n- CVE-2023-2728: bypass of the mountable secrets policy enforced by the ServiceAccount admission plugin. (bsc#1211631)\n- CVE-2023-39325: go1.20: excessive resource consumption when dealing with rapid stream resets. (bsc#1229869)  \n- CVE-2023-44487: google.golang.org/grpc, kube-apiserver: HTTP/2 rapid reset vulnerability. (bsc#1229869)\n- CVE-2023-45288: golang.org/x/net: excessive CPU consumption when processing unlimited sets of headers. (bsc#1229869)\n- CVE-2024-0793: kube-controller-manager pod crash when processing malformed HPA v1 manifests. (bsc#1219964)  \n- CVE-2024-3177: bypass of the mountable secrets policy enforced by the ServiceAccount admission plugin. (bsc#1222539)\n- CVE-2024-24786: github.com/golang/protobuf: infinite loop when unmarshaling invalid JSON. (bsc#1229867)\n\nBug fixes:\n\n- Use -trimpath in non-DBG mode for reproducible builds. (bsc#1062303)\n- Fix multiple issues for successful `kubeadm init` run. (bsc#1214406)\n- Update go to version 1.22.5 in build requirements. (bsc#1229858)\n","status":"published","published":"2024-09-19T14:50:41Z","modified":"2026-02-04T02:53:55.286421Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"SUSE-SU-2024:3343-1","title":"Security update for kubernetes1.24","description":"This update for kubernetes1.24 fixes the following issues:\n\n- CVE-2021-25743: escape, meta and control sequences in raw data output to terminal not neutralized. (bsc#1194400)\n- CVE-2023-2727: bypass of policies imposed by the ImagePolicyWebhook admission plugin. (bsc#1211630)\n- CVE-2023-2728: bypass of the mountable secrets policy enforced by the ServiceAccount admission plugin. (bsc#1211631)\n- CVE-2023-39325: go1.20: excessive resource consumption when dealing with rapid stream resets. (bsc#1229869)  \n- CVE-2023-44487: google.golang.org/grpc, kube-apiserver: HTTP/2 rapid reset vulnerability. (bsc#1229869)\n- CVE-2023-45288: golang.org/x/net: excessive CPU consumption when processing unlimited sets of headers. (bsc#1229869)\n- CVE-2024-0793: kube-controller-manager pod crash when processing malformed HPA v1 manifests. (bsc#1219964)  \n- CVE-2024-3177: bypass of the mountable secrets policy enforced by the ServiceAccount admission plugin. (bsc#1222539)\n- CVE-2024-24786: github.com/golang/protobuf: infinite loop when unmarshaling invalid JSON. (bsc#1229867)\n\nBug fixes:\n\n- Use -trimpath in non-DBG mode for reproducible builds. (bsc#1062303)\n- Fix multiple issues for successful `kubeadm init` run. (bsc#1214406)\n- Update go to version 1.22.5 in build requirements. (bsc#1229858)\n","status":"published","published":"2024-09-19T14:51:26Z","modified":"2026-02-04T02:57:24.002344Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"SUSE-SU-2025:02423-1","title":"Security update for kubernetes1.23","description":"This update for kubernetes1.23 fixes the following issues:\n\n- CVE-2021-25743: Escape terminal special characters in kubectl output (bsc#1194400).\n- CVE-2023-2431: Prevent pods to bypass the seccomp profile enforcement (bsc#1212493).\n- CVE-2024-0793: Advance autoscaling v2 as the preferred API version (bsc#1219964).\n- CVE-2024-3177: Prevent bypassing mountable secrets policy imposed by the ServiceAccount admission plugin (bsc#1222539). \n- CVE-2025-22872: Properly handle trailing solidus in unquoted attribute value in foreign content (bsc#1241865).\n","status":"published","published":"2025-07-21T08:36:40Z","modified":"2026-03-23T04:49:40.854316Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02423-2","title":"Security update for kubernetes1.23","description":"This update for kubernetes1.23 fixes the following issues:\n\n- CVE-2021-25743: Escape terminal special characters in kubectl output (bsc#1194400).\n- CVE-2023-2431: Prevent pods to bypass the seccomp profile enforcement (bsc#1212493).\n- CVE-2024-0793: Advance autoscaling v2 as the preferred API version (bsc#1219964).\n- CVE-2024-3177: Prevent bypassing mountable secrets policy imposed by the ServiceAccount admission plugin (bsc#1222539). \n- CVE-2025-22872: Properly handle trailing solidus in unquoted attribute value in foreign content (bsc#1241865).\n","status":"published","published":"2025-08-13T00:10:52Z","modified":"2026-02-04T03:20:50.480082Z","updated_at":"2026-11-02T15:53:56.647031Z"}]}}