CVE-2019-11250

Medium

Advisory

Published 14 Apr 2021In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.018; 77th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 124; of 17,787 indexed, latest versions
Container images: 106; deployed by those charts
Fix available: 2 of 2; affected packages

Kubernetes client-go library logs may disclose credentials to unauthorized users

Carried by container images the latest versions of 124 of 17,787 indexed charts deploy, on 106 images.

Affected package	Affected versions	Fixed in	Images
k8s.io/kubernetesgolang	v0.0.0-20240417172702-7c48c2bd72b9, v0.0.0-20240514104202-6911225c3f74, v0.0.0-20240611201126-f25b321b9ae4, v0.0.0-20240611201706-062798d53d83+31 more	1.16.0-beta.1	66
k8s.io/client-gogolang	v0.0.0-20180806134042-1f13a808da65, v0.0.0-20181213151034-8d9ed539ba31, v0.0.0-20190222093734-6e378217e628, v0.0.0-20190419212732-59781b88d0fa+18 more	0.17.0	44

OSV records: GHSA-jmrx-5g74-6v2f
Also known as: GO-2021-0065

Charts affected

124 by stars

Chart

Latest

Affected images

Radar Score

nem-monitoringopencord

1.3.22

1 of 9 See more

nem-monitoring opencord 1.3.22

1 of the 9 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.13.1	0a8caa2e9f19	k8s.io/client-go@v0.0.0-20190620085101-78d2af792bab	0.17.0

Open the chart page →

4,612

kochiphntom

1.1.4

1 of 1 See more

kochi phntom 1.1.4

1 of the 1 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
phntom/kochi :1.1.3	3b82358bd56e	k8s.io/client-go@v0.0.0-20180806134042-1f13a808da65	0.17.0

Open the chart page →

2,963

npre-essentialsphntom

0.1.60

1 of 22 See more

npre-essentials phntom 0.1.60

1 of the 22 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
phntom/kochi :1.1.3	3b82358bd56e	k8s.io/client-go@v0.0.0-20180806134042-1f13a808da65	0.17.0

Open the chart page →

26,840

planectlplanectl

0.7.0

1 of 10 See more

planectl planectl 0.7.0

1 of the 10 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
alpine/k8s :1.30.2	cd560fce90f7	k8s.io/kubernetes@v0.0.0-20240611202059-39683505b630	1.16.0-beta.1

Open the chart page →

25,626

gitlab-runner-operatorpnnl-miscscripts

0.1.6

1 of 1 See more

gitlab-runner-operator pnnl-miscscripts 0.1.6

1 of the 1 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
pnnlmiscscripts/gitlab-runner-operator :0.1.3-1	155131891741	k8s.io/client-go@v0.0.0-20191016111102-bec269661e48	0.17.0

Open the chart page →

11,153

capsule-proxyprojectcapsule

0.14.1

1 of 2 See more

capsule-proxy projectcapsule 0.14.1

1 of the 2 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
clastix/kubectl :v1.31	22918a06c253	k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559	1.16.0-beta.1

Open the chart page →

1,224

cf-operatorquarks

2.3.0+0.g27a91cdf

2 of 2 See more

cf-operator quarks 2.3.0+0.g27a91cdf

2 of the 2 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
cfcontainerization/cf-operator :v2.3.0-0.g27a91cdf	82fa261c18a8	k8s.io/client-go@v0.0.0-20190918160344-1fbdaa4c8d90	0.17.0
cfcontainerization/quarks-job :v0.0.0-0.g70ae34b	58fb1c173a46	k8s.io/client-go@v0.0.0-20190918160344-1fbdaa4c8d90	0.17.0

Open the chart page →

11,942

stackrox-chartredhat-cop

0.0.10

1 of 1 See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	k8s.io/client-go@v0.16.8	0.17.0

Open the chart page →

29,226

reportportalreportportal

5.7.2

1 of 8 See more

reportportal reportportal 5.7.2

1 of the 8 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
reportportal/service-index :5.0.11	2b27a2d7a87d	k8s.io/client-go@v0.0.0-20190620085101-78d2af792bab	0.17.0

Open the chart page →

25,739

rke2-canal-1.19-1.20rke2-charts

3.13.3-build2021102202

1 of 2 See more

rke2-canal-1.19-1.20 rke2-charts 3.13.3-build2021102202

1 of the 2 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
rancher/hardened-calico :v3.13.3-build20210223	c678c25d47c8	k8s.io/client-go@v0.0.0-20191016111102-bec269661e48	0.17.0

Open the chart page →

5,942

krr-enforcerrobusta

0.3.5

1 of 2 See more

krr-enforcer robusta 0.3.5

1 of the 2 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
alpine/k8s :1.30.0	bd01dae02676	k8s.io/kubernetes@v0.0.0-20240417172702-7c48c2bd72b9	1.16.0-beta.1

Open the chart page →

4,039

ai-agentromholdings

0.0.1

1 of 1 See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
quay.io/devtron/ai-agent :0.0.1	6545dac92173	k8s.io/kubernetes@v0.0.0-20241022202705-f0c1ea863533	1.16.0-beta.1

Open the chart page →

9,152

secret-managersecret-manager

1.0.0

1 of 4 See more

secret-manager secret-manager 1.0.0

1 of the 4 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
leonardomulticloud/webhook :v1.0.0	d119918900e8	k8s.io/kubernetes@v0.0.0-20240911212207-948afe5ca072	1.16.0-beta.1

Open the chart page →

5,499

kyvernosoftonic

3.5.2

1 of 7 See more

kyverno softonic 3.5.2

1 of the 7 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
registry.k8s.io/kubectl :v1.32.7	3c5268158974	k8s.io/kubernetes@v0.0.0-20250715180032-158eee9fac88	1.16.0-beta.1

Open the chart page →

1,021

gloo-meshsolo-gloo-mesh

1.1.2

1 of 1 See more

gloo-mesh solo-gloo-mesh 1.1.2

1 of the 1 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
gcr.io/gloo-mesh/gloo-mesh :1.1.2	a4011eae6a0b	k8s.io/kubernetes@v1.13.0	1.16.0-beta.1

Open the chart page →

3,259

spire-identity-exchangespiffe

0.2.2

1 of 3 See more

spire-identity-exchange spiffe 0.2.2

1 of the 3 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
registry.k8s.io/kubectl :v1.31.0	99b37df34bc4	k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559	1.16.0-beta.1

Open the chart page →

1,429

kube-ebs-taggersstarcher

0.1.0+7abf4f7

1 of 1 See more

kube-ebs-tagger sstarcher 0.1.0+7abf4f7

1 of the 1 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
sstarcher/kube-ebs-tagger :0.1.0	1f8cae8cfa80	k8s.io/client-go@v0.0.0-20191016111102-bec269661e48	0.17.0

Open the chart page →

3,096

proxyinjectorstakater

0.0.23

1 of 1 See more

proxyinjector stakater 0.0.23

1 of the 1 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
stakater/proxyinjector :v0.0.23	83fef483d497	k8s.io/client-go@v0.0.0-20190918160344-1fbdaa4c8d90	0.17.0

Open the chart page →

2,853

cost-analyzerstatcan

1.82.2

1 of 9 See more

cost-analyzer statcan 1.82.2

1 of the 9 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
gcr.io/kubecost1/server :prod-1.82.2	2b1a3d08caac	k8s.io/client-go@v0.0.0-20190419212732-59781b88d0fa k8s.io/kubernetes@v1.14.1	0.17.0 1.16.0-beta.1

Open the chart page →

16,508

tfy-inferentia-operatortruefoundry

0.2.8

1 of 3 See more

tfy-inferentia-operator truefoundry 0.2.8

1 of the 3 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
public.ecr.aws/eks-distro/kubernetes/kube-scheduler :v1.29.14-eks-1-29-latest	e7e1db003e6a	k8s.io/kubernetes@v0.0.0-20250108021927-cd1e1306b0ba	1.16.0-beta.1

Open the chart page →

2,904

jupyterhubuninettsigma2

1.6.0

1 of 5 See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.30	1249fc292e84	k8s.io/kubernetes@v0.0.0-20241119172634-0c76c645d5a6	1.16.0-beta.1

Open the chart page →

8,370

azure-scheduledevents-managerwebdevops

1.0.17

1 of 1 See more

azure-scheduledevents-manager webdevops 1.0.17

1 of the 1 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
webdevops/azure-scheduledevents-manager :24.9.0-kubernetes	7acd46a8a972	k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559	1.16.0-beta.1

Open the chart page →

1,124

temporalwenerme

0.15.1

1 of 13 See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.16.0	e4ca62c0d62f	k8s.io/client-go@v0.0.0-20190620085101-78d2af792bab	0.17.0

Open the chart page →

22,665

xkopsxkops

0.1.0

1 of 5 See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
murtazashah46/helmfile :latest	4d11726cf803	k8s.io/kubernetes@v0.0.0-20241022202812-5864a4677267	1.16.0-beta.1

Open the chart page →

13,197

Container images carrying it

106 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/open-cluster-management/cluster-proxy :v0.12.0	35f9c3ad644a	k8s.io/kubernetes@v0.0.0-20240611202059-39683505b630	1.16.0-beta.1	1
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	k8s.io/client-go@v0.16.8	0.17.0	1
registry.k8s.io/kubectl :v1.32.7	3c5268158974	k8s.io/kubernetes@v0.0.0-20250715180032-158eee9fac88	1.16.0-beta.1	1
registry.k8s.io/kubectl :v1.32.0	8ccae74fc039	k8s.io/kubernetes@v0.0.0-20241211175915-70d3cc986aa8	1.16.0-beta.1	1
registry.k8s.io/kubectl :v1.31.10	e0b2d217d1d2	k8s.io/kubernetes@v0.0.0-20250617183334-61183587c03f	1.16.0-beta.1	1
registry.k8s.io/kube-scheduler :v1.28.11	46cf7475c8da	k8s.io/kubernetes@v0.0.0-20240611201126-f25b321b9ae4	1.16.0-beta.1	1