CVE-2019-11250

Medium

Advisory

Published 14 Apr 2021In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.018; 77th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 122; of 17,781 indexed, latest versions
Container images: 104; deployed by those charts
Fix available: 2 of 2; affected packages

Kubernetes client-go library logs may disclose credentials to unauthorized users

Carried by container images the latest versions of 122 of 17,781 indexed charts deploy, on 104 images.

Affected package	Affected versions	Fixed in	Images
k8s.io/kubernetesgolang	v0.0.0-20240417172702-7c48c2bd72b9, v0.0.0-20240514104202-6911225c3f74, v0.0.0-20240611201126-f25b321b9ae4, v0.0.0-20240611201706-062798d53d83+31 more	1.16.0-beta.1	64
k8s.io/client-gogolang	v0.0.0-20180806134042-1f13a808da65, v0.0.0-20181213151034-8d9ed539ba31, v0.0.0-20190222093734-6e378217e628, v0.0.0-20190419212732-59781b88d0fa+18 more	0.17.0	44

OSV records: GHSA-jmrx-5g74-6v2f
Also known as: GO-2021-0065

Charts affected

122 by stars

Chart

Latest

Affected images

Radar Score

npre-essentialsphntom

0.1.60

1 of 22 See more

npre-essentials phntom 0.1.60

1 of the 22 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
phntom/kochi :1.1.3	3b82358bd56e	k8s.io/client-go@v0.0.0-20180806134042-1f13a808da65	0.17.0

Open the chart page →

26,840

planectlplanectl

0.7.0

1 of 10 See more

planectl planectl 0.7.0

1 of the 10 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
alpine/k8s :1.30.2	cd560fce90f7	k8s.io/kubernetes@v0.0.0-20240611202059-39683505b630	1.16.0-beta.1

Open the chart page →

25,934

gitlab-runner-operatorpnnl-miscscripts

0.1.6

1 of 1 See more

gitlab-runner-operator pnnl-miscscripts 0.1.6

1 of the 1 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
pnnlmiscscripts/gitlab-runner-operator :0.1.3-1	155131891741	k8s.io/client-go@v0.0.0-20191016111102-bec269661e48	0.17.0

Open the chart page →

11,151

capsule-proxyprojectcapsule

0.14.1

1 of 2 See more

capsule-proxy projectcapsule 0.14.1

1 of the 2 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
clastix/kubectl :v1.31	22918a06c253	k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559	1.16.0-beta.1

Open the chart page →

1,222

cf-operatorquarks

2.3.0+0.g27a91cdf

2 of 2 See more

cf-operator quarks 2.3.0+0.g27a91cdf

2 of the 2 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
cfcontainerization/cf-operator :v2.3.0-0.g27a91cdf	82fa261c18a8	k8s.io/client-go@v0.0.0-20190918160344-1fbdaa4c8d90	0.17.0
cfcontainerization/quarks-job :v0.0.0-0.g70ae34b	58fb1c173a46	k8s.io/client-go@v0.0.0-20190918160344-1fbdaa4c8d90	0.17.0

Open the chart page →

11,942

stackrox-chartredhat-cop

0.0.10

1 of 1 See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	k8s.io/client-go@v0.16.8	0.17.0

Open the chart page →

29,227

reportportalreportportal

5.7.2

1 of 8 See more

reportportal reportportal 5.7.2

1 of the 8 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
reportportal/service-index :5.0.11	2b27a2d7a87d	k8s.io/client-go@v0.0.0-20190620085101-78d2af792bab	0.17.0

Open the chart page →

25,737

rke2-canal-1.19-1.20rke2-charts

3.13.3-build2021102202

1 of 2 See more

rke2-canal-1.19-1.20 rke2-charts 3.13.3-build2021102202

1 of the 2 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
rancher/hardened-calico :v3.13.3-build20210223	c678c25d47c8	k8s.io/client-go@v0.0.0-20191016111102-bec269661e48	0.17.0

Open the chart page →

5,942

krr-enforcerrobusta

0.3.5

1 of 2 See more

krr-enforcer robusta 0.3.5

1 of the 2 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
alpine/k8s :1.30.0	bd01dae02676	k8s.io/kubernetes@v0.0.0-20240417172702-7c48c2bd72b9	1.16.0-beta.1

Open the chart page →

4,038

ai-agentromholdings

0.0.1

1 of 1 See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
quay.io/devtron/ai-agent :0.0.1	6545dac92173	k8s.io/kubernetes@v0.0.0-20241022202705-f0c1ea863533	1.16.0-beta.1

Open the chart page →

9,607

secret-managersecret-manager

1.0.0

1 of 4 See more

secret-manager secret-manager 1.0.0

1 of the 4 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
leonardomulticloud/webhook :v1.0.0	d119918900e8	k8s.io/kubernetes@v0.0.0-20240911212207-948afe5ca072	1.16.0-beta.1

Open the chart page →

5,497

kyvernosoftonic

3.5.2

1 of 7 See more

kyverno softonic 3.5.2

1 of the 7 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
registry.k8s.io/kubectl :v1.32.7	3c5268158974	k8s.io/kubernetes@v0.0.0-20250715180032-158eee9fac88	1.16.0-beta.1

Open the chart page →

1,019

gloo-meshsolo-gloo-mesh

1.1.2

1 of 1 See more

gloo-mesh solo-gloo-mesh 1.1.2

1 of the 1 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
gcr.io/gloo-mesh/gloo-mesh :1.1.2	a4011eae6a0b	k8s.io/kubernetes@v1.13.0	1.16.0-beta.1

Open the chart page →

3,257

spire-identity-exchangespiffe

0.2.2

1 of 3 See more

spire-identity-exchange spiffe 0.2.2

1 of the 3 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
registry.k8s.io/kubectl :v1.31.0	99b37df34bc4	k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559	1.16.0-beta.1

Open the chart page →

1,427

kube-ebs-taggersstarcher

0.1.0+7abf4f7

1 of 1 See more

kube-ebs-tagger sstarcher 0.1.0+7abf4f7

1 of the 1 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
sstarcher/kube-ebs-tagger :0.1.0	1f8cae8cfa80	k8s.io/client-go@v0.0.0-20191016111102-bec269661e48	0.17.0

Open the chart page →

3,096

proxyinjectorstakater

0.0.23

1 of 1 See more

proxyinjector stakater 0.0.23

1 of the 1 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
stakater/proxyinjector :v0.0.23	83fef483d497	k8s.io/client-go@v0.0.0-20190918160344-1fbdaa4c8d90	0.17.0

Open the chart page →

2,853

cost-analyzerstatcan

1.82.2

1 of 9 See more

cost-analyzer statcan 1.82.2

1 of the 9 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
gcr.io/kubecost1/server :prod-1.82.2	2b1a3d08caac	k8s.io/client-go@v0.0.0-20190419212732-59781b88d0fa k8s.io/kubernetes@v1.14.1	0.17.0 1.16.0-beta.1

Open the chart page →

16,506

tfy-inferentia-operatortruefoundry

0.2.8

1 of 3 See more

tfy-inferentia-operator truefoundry 0.2.8

1 of the 3 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
public.ecr.aws/eks-distro/kubernetes/kube-scheduler :v1.29.14-eks-1-29-latest	e7e1db003e6a	k8s.io/kubernetes@v0.0.0-20250108021927-cd1e1306b0ba	1.16.0-beta.1

Open the chart page →

2,902

jupyterhubuninettsigma2

1.6.0

1 of 5 See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.30	1249fc292e84	k8s.io/kubernetes@v0.0.0-20241119172634-0c76c645d5a6	1.16.0-beta.1

Open the chart page →

8,607

azure-scheduledevents-managerwebdevops

1.0.17

1 of 1 See more

azure-scheduledevents-manager webdevops 1.0.17

1 of the 1 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
webdevops/azure-scheduledevents-manager :24.9.0-kubernetes	7acd46a8a972	k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559	1.16.0-beta.1

Open the chart page →

1,122

temporalwenerme

0.15.1

1 of 13 See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.16.0	e4ca62c0d62f	k8s.io/client-go@v0.0.0-20190620085101-78d2af792bab	0.17.0

Open the chart page →

22,665

xkopsxkops

0.1.0

1 of 5 See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2019-11250.

Container image	Digest	Package	Fixed in
murtazashah46/helmfile :latest	4d11726cf803	k8s.io/kubernetes@v0.0.0-20241022202812-5864a4677267	1.16.0-beta.1

Open the chart page →

13,677

Container images carrying it

104 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
clastix/kubectl :v1.31	22918a06c253	k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559	1.16.0-beta.1	6
prom/prometheus :v2.13.1	0a8caa2e9f19	k8s.io/client-go@v0.0.0-20190620085101-78d2af792bab	0.17.0	5
quay.io/k8scsi/csi-node-driver-registrar :v1.3.0	e6df72478956	k8s.io/kubernetes@v1.11.0-beta.2	1.16.0-beta.1	5
stakater/proxyinjector :v0.0.23	83fef483d497	k8s.io/client-go@v0.0.0-20190918160344-1fbdaa4c8d90	0.17.0	3
quay.io/devtron/ai-agent :0.0.1	6545dac92173	k8s.io/kubernetes@v0.0.0-20241022202705-f0c1ea863533	1.16.0-beta.1	3
quay.io/kubernetes_incubator/nfs-provisioner :v2.3.0	f402e6039b3c	k8s.io/client-go@v0.0.0-20190816061517-44c2c549a534	0.17.0	3
registry.k8s.io/kubectl :v1.31.0	99b37df34bc4	k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559	1.16.0-beta.1	3
registry.k8s.io/sig-storage/nfs-provisioner :v4.0.8	c825f3d5e28b	k8s.io/client-go@v0.0.0-20190816061517-44c2c549a534	0.17.0	3
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	k8s.io/client-go@v0.0.0-20190823012814-cdbd92c111cf k8s.io/kubernetes@v1.14.1	0.17.0 1.16.0-beta.1	2
phntom/kochi :1.1.3	3b82358bd56e	k8s.io/client-go@v0.0.0-20180806134042-1f13a808da65	0.17.0	2
gcr.io/k8s-staging-sig-storage/nfs-provisioner :v3.0.0	2de1d15fc1f2	k8s.io/client-go@v0.0.0-20190816061517-44c2c549a534	0.17.0	2
ghcr.io/bryopsida/k8s-dev-pod :main	82d0b161161d	k8s.io/kubernetes@v0.0.0-20250515091041-8f3800390d48	1.16.0-beta.1	2
ghcr.io/grafana/helm-chart-toolbox-kubectl :0.1.1	c137478627cc	k8s.io/kubernetes@v0.0.0-20250813142120-2e83bc4bf31e	1.16.0-beta.1	2
quay.io/zncdatadev/tools :1.0.0-kubedoop0.0.0-dev	382fca2054c9	k8s.io/kubernetes@v0.0.0-20240911212207-948afe5ca072	1.16.0-beta.1	2
registry.k8s.io/kube-scheduler :v1.30.14	74a5cf9cfa9f	k8s.io/kubernetes@v0.0.0-20250617182919-9e1848391882	1.16.0-beta.1	2
airbyte/pod-sweeper :1.5.1	98d2c39d512e	k8s.io/kubernetes@v0.0.0-20241210113726-a78aa47129b8	1.16.0-beta.1	1
alpine/k8s :1.31.10	6dbe6f391eda	k8s.io/kubernetes@v0.0.0-20250617183334-61183587c03f	1.16.0-beta.1	1
alpine/k8s :1.31.13	7a319b15cfc9	k8s.io/kubernetes@v0.0.0-20250909225156-c601ba40fa8f	1.16.0-beta.1	1
alpine/k8s :1.32.4	7e1e7d5b7a96	k8s.io/kubernetes@v0.0.0-20250422155613-59526cd48674	1.16.0-beta.1	1
alpine/k8s :1.31.4	9c4976d47656	k8s.io/kubernetes@v0.0.0-20241210113726-a78aa47129b8	1.16.0-beta.1	1
alpine/k8s :1.18.16	a41efe02a041	k8s.io/client-go@v0.16.8	0.17.0	1
alpine/k8s :1.30.0	bd01dae02676	k8s.io/kubernetes@v0.0.0-20240417172702-7c48c2bd72b9	1.16.0-beta.1	1
alpine/k8s :1.30.2	cd560fce90f7	k8s.io/kubernetes@v0.0.0-20240611202059-39683505b630	1.16.0-beta.1	1
alpine/k8s :1.28.13	e5c0b053fed7	k8s.io/kubernetes@v0.0.0-20240814194418-024ab2a13ff7	1.16.0-beta.1	1
alpine/k8s :1.32.3	eec354133193	k8s.io/kubernetes@v0.0.0-20250311195220-32cc146f75aa	1.16.0-beta.1	1
bitnamilegacy/kubectl :1.30	1249fc292e84	k8s.io/kubernetes@v0.0.0-20241119172634-0c76c645d5a6	1.16.0-beta.1	1
bitnamilegacy/kubectl :1.31	64614ef8290f	k8s.io/kubernetes@v0.0.0-20241210113726-a78aa47129b8	1.16.0-beta.1	1
bitnamilegacy/kubectl :1.30.5	744f84cf7493	k8s.io/kubernetes@v0.0.0-20240912001154-74e84a90c725	1.16.0-beta.1	1
burganbank/vault-initializer :v1	9259c34e4037	k8s.io/kubernetes@v0.0.0-20240514104202-6911225c3f74	1.16.0-beta.1	1
cfcontainerization/cf-operator :v2.3.0-0.g27a91cdf	82fa261c18a8	k8s.io/client-go@v0.0.0-20190918160344-1fbdaa4c8d90	0.17.0	1
cfcontainerization/quarks-job :v0.0.0-0.g70ae34b	58fb1c173a46	k8s.io/client-go@v0.0.0-20190918160344-1fbdaa4c8d90	0.17.0	1
cloudbees/cert-requester :2.3.3	1d44fb4f799b	k8s.io/client-go@v0.0.0-20200904053452-bb0bc934b5b4	0.17.0	1
cloudbees/sidecar-injector :2.3.3	8f102ef0383a	k8s.io/client-go@v0.0.0-20200904053452-bb0bc934b5b4	0.17.0	1
crowdfox/external-service-operator :v1.1.0	6fa7e8063d27	k8s.io/client-go@v0.0.0-20181213151034-8d9ed539ba31 k8s.io/kubernetes@v1.13.4	0.17.0 1.16.0-beta.1	1
datawire/ambassador-operator :v1.3.0	f95ae710d75c	k8s.io/client-go@v0.0.0-20191016111102-bec269661e48	0.17.0	1
dserio83/velero-api :0.3.1	6b3d9115fee2	k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559	1.16.0-beta.1	1
huzafach/aws-cli-k8 :1.0.0	6e271d43ea48	k8s.io/kubernetes@v0.0.0-20240611202059-39683505b630	1.16.0-beta.1	1
jmferrer/azure-devops-agent :latest	030f68ec6998	k8s.io/client-go@v0.0.0-20191016111102-bec269661e48	0.17.0	1
kubeflownotebookswg/kfam :v1.9.2	2060a2ede788	k8s.io/client-go@v0.0.0-20190528110200-4f3abb12cae2	0.17.0	1
kubeflownotebookswg/kfam :v1.6.1	f226fb44db57	k8s.io/client-go@v0.0.0-20190528110200-4f3abb12cae2	0.17.0	1
kubesphere/kubectl :v1.27.16	49b445b1b732	k8s.io/kubernetes@v0.0.0-20240717014424-cbb86e0d7f4a	1.16.0-beta.1	1
kudobuilder/controller :v0.9.0	69072d979708	k8s.io/client-go@v0.0.0-20191016111102-bec269661e48	0.17.0	1
leonardomulticloud/webhook :v1.0.0	d119918900e8	k8s.io/kubernetes@v0.0.0-20240911212207-948afe5ca072	1.16.0-beta.1	1
longhornio/longhorn-manager :v1.1.1	ede61fe2a472	k8s.io/client-go@v0.16.15	0.17.0	1
mesosphere/kubeaddons-addon-initializer :v0.2.0	9f863160127b	k8s.io/client-go@v0.0.0-20190717023132-0c47f9da0001	0.17.0	1
mesosphere/kubeaddons-addon-initializer :v0.2.8	c10011f866f2	k8s.io/client-go@v0.15.10	0.17.0	1
mesosphere/traefik-forward-auth :3.1.0	5456581d7b76	k8s.io/client-go@v0.0.0-20191016111102-bec269661e48	0.17.0	1
mpioperator/mpi-operator :0.3.0	3ccfa8d8b7bf	k8s.io/client-go@v0.15.10	0.17.0	1
murtazashah46/helmfile :latest	4d11726cf803	k8s.io/kubernetes@v0.0.0-20241022202812-5864a4677267	1.16.0-beta.1	1
openpolicyagent/gatekeeper-crds :v3.17.1	77bc9bf3d163	k8s.io/kubernetes@v0.0.0-20240716234811-6fc0a69044f1	1.16.0-beta.1	1