CVE-2019-11250

Medium

Advisory

Published 14 Apr 2021In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.018; 77th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 122; of 17,781 indexed, latest versions
Container images: 104; deployed by those charts
Fix available: 2 of 2; affected packages

Kubernetes client-go library logs may disclose credentials to unauthorized users

Carried by container images the latest versions of 122 of 17,781 indexed charts deploy, on 104 images.

Affected package	Affected versions	Fixed in	Images
k8s.io/kubernetesgolang	v0.0.0-20240417172702-7c48c2bd72b9, v0.0.0-20240514104202-6911225c3f74, v0.0.0-20240611201126-f25b321b9ae4, v0.0.0-20240611201706-062798d53d83+31 more	1.16.0-beta.1	64
k8s.io/client-gogolang	v0.0.0-20180806134042-1f13a808da65, v0.0.0-20181213151034-8d9ed539ba31, v0.0.0-20190222093734-6e378217e628, v0.0.0-20190419212732-59781b88d0fa+18 more	0.17.0	44

OSV records: GHSA-jmrx-5g74-6v2f
Also known as: GO-2021-0065

Charts affected

122 by stars

Chart

Latest

Affected images

Radar Score

npre-essentialsphntom

0.1.60

1 of 22 See more

npre-essentials phntom 0.1.60

1 of the 22 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
phntom/kochi :1.1.3	3b82358bd56e	k8s.io/client-go@v0.0.0-20180806134042-1f13a808da65	0.17.0

Open the chart page →

26,840

planectlplanectl

0.7.0

1 of 10 See more

planectl planectl 0.7.0

1 of the 10 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
alpine/k8s :1.30.2	cd560fce90f7	k8s.io/kubernetes@v0.0.0-20240611202059-39683505b630	1.16.0-beta.1

Open the chart page →

25,934

gitlab-runner-operatorpnnl-miscscripts

0.1.6

1 of 1 See more

gitlab-runner-operator pnnl-miscscripts 0.1.6

1 of the 1 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
pnnlmiscscripts/gitlab-runner-operator :0.1.3-1	155131891741	k8s.io/client-go@v0.0.0-20191016111102-bec269661e48	0.17.0

Open the chart page →

11,151

capsule-proxyprojectcapsule

0.14.1

1 of 2 See more

capsule-proxy projectcapsule 0.14.1

1 of the 2 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
clastix/kubectl :v1.31	22918a06c253	k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559	1.16.0-beta.1

Open the chart page →

1,222

cf-operatorquarks

2.3.0+0.g27a91cdf

2 of 2 See more

cf-operator quarks 2.3.0+0.g27a91cdf

2 of the 2 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
cfcontainerization/cf-operator :v2.3.0-0.g27a91cdf	82fa261c18a8	k8s.io/client-go@v0.0.0-20190918160344-1fbdaa4c8d90	0.17.0
cfcontainerization/quarks-job :v0.0.0-0.g70ae34b	58fb1c173a46	k8s.io/client-go@v0.0.0-20190918160344-1fbdaa4c8d90	0.17.0

Open the chart page →

11,942

stackrox-chartredhat-cop

0.0.10

1 of 1 See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	k8s.io/client-go@v0.16.8	0.17.0

Open the chart page →

29,227

reportportalreportportal

5.7.2

1 of 8 See more

reportportal reportportal 5.7.2

1 of the 8 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
reportportal/service-index :5.0.11	2b27a2d7a87d	k8s.io/client-go@v0.0.0-20190620085101-78d2af792bab	0.17.0

Open the chart page →

25,737

rke2-canal-1.19-1.20rke2-charts

3.13.3-build2021102202

1 of 2 See more

rke2-canal-1.19-1.20 rke2-charts 3.13.3-build2021102202

1 of the 2 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
rancher/hardened-calico :v3.13.3-build20210223	c678c25d47c8	k8s.io/client-go@v0.0.0-20191016111102-bec269661e48	0.17.0

Open the chart page →

5,942

krr-enforcerrobusta

0.3.5

1 of 2 See more

krr-enforcer robusta 0.3.5

1 of the 2 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
alpine/k8s :1.30.0	bd01dae02676	k8s.io/kubernetes@v0.0.0-20240417172702-7c48c2bd72b9	1.16.0-beta.1

Open the chart page →

4,038

ai-agentromholdings

0.0.1

1 of 1 See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
quay.io/devtron/ai-agent :0.0.1	6545dac92173	k8s.io/kubernetes@v0.0.0-20241022202705-f0c1ea863533	1.16.0-beta.1

Open the chart page →

9,607

secret-managersecret-manager

1.0.0

1 of 4 See more

secret-manager secret-manager 1.0.0

1 of the 4 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
leonardomulticloud/webhook :v1.0.0	d119918900e8	k8s.io/kubernetes@v0.0.0-20240911212207-948afe5ca072	1.16.0-beta.1

Open the chart page →

5,497

kyvernosoftonic

3.5.2

1 of 7 See more

kyverno softonic 3.5.2

1 of the 7 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
registry.k8s.io/kubectl :v1.32.7	3c5268158974	k8s.io/kubernetes@v0.0.0-20250715180032-158eee9fac88	1.16.0-beta.1

Open the chart page →

1,019

gloo-meshsolo-gloo-mesh

1.1.2

1 of 1 See more

gloo-mesh solo-gloo-mesh 1.1.2

1 of the 1 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
gcr.io/gloo-mesh/gloo-mesh :1.1.2	a4011eae6a0b	k8s.io/kubernetes@v1.13.0	1.16.0-beta.1

Open the chart page →

3,257

spire-identity-exchangespiffe

0.2.2

1 of 3 See more

spire-identity-exchange spiffe 0.2.2

1 of the 3 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
registry.k8s.io/kubectl :v1.31.0	99b37df34bc4	k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559	1.16.0-beta.1

Open the chart page →

1,427

kube-ebs-taggersstarcher

0.1.0+7abf4f7

1 of 1 See more

kube-ebs-tagger sstarcher 0.1.0+7abf4f7

1 of the 1 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
sstarcher/kube-ebs-tagger :0.1.0	1f8cae8cfa80	k8s.io/client-go@v0.0.0-20191016111102-bec269661e48	0.17.0

Open the chart page →

3,096

proxyinjectorstakater

0.0.23

1 of 1 See more

proxyinjector stakater 0.0.23

1 of the 1 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
stakater/proxyinjector :v0.0.23	83fef483d497	k8s.io/client-go@v0.0.0-20190918160344-1fbdaa4c8d90	0.17.0

Open the chart page →

2,853

cost-analyzerstatcan

1.82.2

1 of 9 See more

cost-analyzer statcan 1.82.2

1 of the 9 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
gcr.io/kubecost1/server :prod-1.82.2	2b1a3d08caac	k8s.io/client-go@v0.0.0-20190419212732-59781b88d0fa k8s.io/kubernetes@v1.14.1	0.17.0 1.16.0-beta.1

Open the chart page →

16,506

tfy-inferentia-operatortruefoundry

0.2.8

1 of 3 See more

tfy-inferentia-operator truefoundry 0.2.8

1 of the 3 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
public.ecr.aws/eks-distro/kubernetes/kube-scheduler :v1.29.14-eks-1-29-latest	e7e1db003e6a	k8s.io/kubernetes@v0.0.0-20250108021927-cd1e1306b0ba	1.16.0-beta.1

Open the chart page →

2,902

jupyterhubuninettsigma2

1.6.0

1 of 5 See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.30	1249fc292e84	k8s.io/kubernetes@v0.0.0-20241119172634-0c76c645d5a6	1.16.0-beta.1

Open the chart page →

8,607

azure-scheduledevents-managerwebdevops

1.0.17

1 of 1 See more

azure-scheduledevents-manager webdevops 1.0.17

1 of the 1 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
webdevops/azure-scheduledevents-manager :24.9.0-kubernetes	7acd46a8a972	k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559	1.16.0-beta.1

Open the chart page →

1,122

temporalwenerme

0.15.1

1 of 13 See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.16.0	e4ca62c0d62f	k8s.io/client-go@v0.0.0-20190620085101-78d2af792bab	0.17.0

Open the chart page →

22,665

xkopsxkops

0.1.0

1 of 5 See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
murtazashah46/helmfile :latest	4d11726cf803	k8s.io/kubernetes@v0.0.0-20241022202812-5864a4677267	1.16.0-beta.1

Open the chart page →

13,677

Container images carrying it

104 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
opsgenie/kubernetes-event-exporter :0.9	ecb246e4d260	k8s.io/client-go@v0.0.0-20190819141724-e14f31a72a77	0.17.0	1
pnnlmiscscripts/gitlab-runner-operator :0.1.3-1	155131891741	k8s.io/client-go@v0.0.0-20191016111102-bec269661e48	0.17.0	1
prom/prometheus :v2.16.0	e4ca62c0d62f	k8s.io/client-go@v0.0.0-20190620085101-78d2af792bab	0.17.0	1
rancher/hardened-calico :v3.13.3	6d2cd61a338b	k8s.io/client-go@v0.0.0-20191114101535-6c5935290e33	0.17.0	1
rancher/hardened-calico :v3.13.3-build20210223	c678c25d47c8	k8s.io/client-go@v0.0.0-20191016111102-bec269661e48	0.17.0	1
rancher/hardened-multus-cni :v3.7.1-build20210416	8eb8092f0728	k8s.io/kubernetes@v1.13.0	1.16.0-beta.1	1
reportportal/service-index :5.0.11	2b27a2d7a87d	k8s.io/client-go@v0.0.0-20190620085101-78d2af792bab	0.17.0	1
runatlantis/atlantis :v0.16.1	45fbaf7e207c	k8s.io/client-go@v0.0.0-20190620085101-78d2af792bab	0.17.0	1
sstarcher/helm-exporter :0.5.0	11769d01ba35	k8s.io/client-go@v0.0.0-20191016111102-bec269661e48	0.17.0	1
sstarcher/kube-ebs-tagger :0.1.0	1f8cae8cfa80	k8s.io/client-go@v0.0.0-20191016111102-bec269661e48	0.17.0	1
veecode/devportal-admin-ui :0.4.30	c69fd286b489	k8s.io/kubernetes@v0.0.0-20240814185733-a51b3b711150	1.16.0-beta.1	1
weaveworks/flagger :0.19.0	a9c2e9df4227	k8s.io/client-go@v0.0.0-20190620074045-585a16d2e773	0.17.0	1
webdevops/azure-scheduledevents-manager :24.9.0-kubernetes	7acd46a8a972	k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559	1.16.0-beta.1	1
gcr.io/gloo-mesh/gloo-mesh :1.1.2	a4011eae6a0b	k8s.io/kubernetes@v1.13.0	1.16.0-beta.1	1
gcr.io/knative-releases/knative.dev/serving/cmd/activator	a5de0fb75046	k8s.io/client-go@v0.16.4	0.17.0	1
gcr.io/kubecost1/server :prod-1.82.2	2b1a3d08caac	k8s.io/client-go@v0.0.0-20190419212732-59781b88d0fa k8s.io/kubernetes@v1.14.1	0.17.0 1.16.0-beta.1	1
gcr.io/kubecost1/server :prod-1.81.0	a348db3e4d74	k8s.io/client-go@v0.0.0-20190419212732-59781b88d0fa k8s.io/kubernetes@v1.14.1	0.17.0 1.16.0-beta.1	1
gcr.io/ml-pipeline/api-server :2.3.0	39661bd823e8	k8s.io/kubernetes@v1.11.1	1.16.0-beta.1	1
gcr.io/ml-pipeline/api-server :2.0.0-alpha.5	dc6ca05bb94f	k8s.io/kubernetes@v1.11.1	1.16.0-beta.1	1
gcr.io/ml-pipeline/cache-server :2.3.0	293941ee4f65	k8s.io/kubernetes@v1.11.1	1.16.0-beta.1	1
gcr.io/ml-pipeline/cache-server :2.0.0-alpha.5	83e79c709df3	k8s.io/kubernetes@v1.11.1	1.16.0-beta.1	1
gcr.io/ml-pipeline/persistenceagent :2.0.0-alpha.5	00db9796a37b	k8s.io/kubernetes@v1.11.1	1.16.0-beta.1	1
gcr.io/ml-pipeline/persistenceagent :2.3.0	109ac1b38c41	k8s.io/kubernetes@v1.11.1	1.16.0-beta.1	1
gcr.io/ml-pipeline/scheduledworkflow :2.0.0-alpha.5	795a0c8a0e13	k8s.io/kubernetes@v1.11.1	1.16.0-beta.1	1
gcr.io/ml-pipeline/scheduledworkflow :2.3.0	f7e67e0bc071	k8s.io/kubernetes@v1.11.1	1.16.0-beta.1	1
ghcr.io/caninehq/canine :latest	a058034ca006	k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559	1.16.0-beta.1	1
ghcr.io/clastix/kamaji-console :v0.2.1	29ecf8d4fa65	k8s.io/kubernetes@v0.0.0-20240514104202-6911225c3f74	1.16.0-beta.1	1
ghcr.io/cohdi/composable-resource-operator :v0.2.2	3f45bf0a1bc0	k8s.io/client-go@v0.0.0-20250729225122-da11948805dd	0.17.0	1
ghcr.io/cosmo-workspace/dev-code-server :v0.0.3	16fda01ae58a	k8s.io/kubernetes@v0.0.0-20240716234811-6fc0a69044f1	1.16.0-beta.1	1
ghcr.io/djcass44/cso-proxy :cccf49fd	b360d44125ad	k8s.io/client-go@v0.0.0-20190620085101-78d2af792bab	0.17.0	1
ghcr.io/fluxcd/flux-cli :v2.5.1	274a179fd402	k8s.io/kubernetes@v0.0.0-20250212211946-67a30c0adcf5	1.16.0-beta.1	1
ghcr.io/gijsvandulmen/k8qu :1.4	e897b18db13d	k8s.io/client-go@v0.0.0-20231220173006-5a0a4247921d	0.17.0	1
ghcr.io/grafana/helm-chart-toolbox-kubectl :0.1.2	c7adcc4db378	k8s.io/kubernetes@v0.0.0-20250311174105-0d0f172cdf9f	1.16.0-beta.1	1
ghcr.io/k8snetworkplumbingwg/multus-cni :v3.7.1	e72aa733faf2	k8s.io/kubernetes@v1.13.0	1.16.0-beta.1	1
ghcr.io/kluster-manager/cluster-proxy :v0.10.1	a7fce69e171c	k8s.io/kubernetes@v0.0.0-20240611202059-39683505b630	1.16.0-beta.1	1
ghcr.io/kore3lab/kore-board.metrics-scraper :v0.5.5	47f88b18fb7c	k8s.io/client-go@v0.0.0-20190222093734-6e378217e628	0.17.0	1
ghcr.io/kubiyabot/kubernetes :1.32.0	b5ade0d9cc6b	k8s.io/kubernetes@v0.0.0-20241211175915-70d3cc986aa8	1.16.0-beta.1	1
ghcr.io/kvaps/linstor-csi :v1.14.0	087618d16b83	k8s.io/kubernetes@v1.14.10	1.16.0-beta.1	1
ghcr.io/mskazemi/kubeintellect :2.5.0	b5d7681d1b9d	k8s.io/kubernetes@v0.0.0-20250422155613-59526cd48674	1.16.0-beta.1	1
ghcr.io/nefelim4ag/k8s-ssh-bastion :0.5.0	4d337e14c80b	k8s.io/kubernetes@v0.0.0-20240611201706-062798d53d83	1.16.0-beta.1	1
ghcr.io/tjm/vault-gcp-secrets :v1.19.5	9f157fe035f1	k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559	1.16.0-beta.1	1
ghcr.io/turbot/guardrails-agent-kubernetes :0.3.0	9d01bf9c9224	k8s.io/kubernetes@v0.0.0-20241119134819-c83cbee114dd	1.16.0-beta.1	1
mcr.microsoft.com/k8s/csi/azuredisk-csi :v1.1.1	ec1803037ed9	k8s.io/client-go@v0.0.0-20201209050023-e24efdc77f15	0.17.0	1
public.ecr.aws/eks-distro/kubernetes/kube-scheduler :v1.29.14-eks-1-29-latest	e7e1db003e6a	k8s.io/kubernetes@v0.0.0-20250108021927-cd1e1306b0ba	1.16.0-beta.1	1
quay.io/bentoml/yatai :0.4.6	14b482c1f1b8	k8s.io/kubernetes@v1.13.4	1.16.0-beta.1	1
quay.io/ddn/exascaler-csi-file-driver :v2.2.6	fe2e2e5a2751	k8s.io/kubernetes@v1.14.1	1.16.0-beta.1	1
quay.io/ibmgaragecloud/cli-tools :v0.15	9663f06adcb1	k8s.io/client-go@v0.0.0-20190620085101-78d2af792bab	0.17.0	1
quay.io/mittwald/kubernetes-secret-generator :v3.4.1	465b8e6d0462	k8s.io/client-go@v0.0.0-20191016111102-bec269661e48	0.17.0	1
quay.io/open-cluster-management/cluster-proxy :v0.12.0	35f9c3ad644a	k8s.io/kubernetes@v0.0.0-20240611202059-39683505b630	1.16.0-beta.1	1
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	k8s.io/client-go@v0.16.8	0.17.0	1