StackRadar

CVE-2019-11253

High

Advisory

Published 18 May 2021In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.259
98th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
18
of 17,781 indexed, latest versions
Container images
19
deployed by those charts
Fix available
1 of 1
affected package

XML Entity Expansion and Improper Input Validation in Kubernetes API server

Carried by container images the latest versions of 18 of 17,781 indexed charts deploy, on 19 images.

Affected packageAffected versionsFixed inImages
k8s.io/kubernetesgolangv1.11.0-beta.2, v1.11.1, v1.13.0, v1.13.4+2 more1.13.12, 1.14.8, 1.16.219
OSV records
GHSA-pmqp-h87c-mr78
Also known as
GO-2022-0703

Charts affected

18 by stars
ChartLatestAffected imagesRadar Score
csi-wekafsplugincsi-wekafsOfficialVerified publisher0.6.2-01 of 6See more

csi-wekafsplugin csi-wekafs 0.6.2-0

1 of the 6 container images this version deploys carry CVE-2019-11253.

Container imageDigestPackageFixed in
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
k8s.io/kubernetes@v1.11.0-beta.2
1.13.12

Open the chart page →

2,822
kubeflowkubeflow1.6.24 of 45See more

kubeflow kubeflow 1.6.2

4 of the 45 container images this version deploys carry CVE-2019-11253.

Container imageDigestPackageFixed in
gcr.io/ml-pipeline/api-server:2.0.0-alpha.5dc6ca05bb94f
k8s.io/kubernetes@v1.11.1
1.13.12
gcr.io/ml-pipeline/cache-server:2.0.0-alpha.583e79c709df3
k8s.io/kubernetes@v1.11.1
1.13.12
gcr.io/ml-pipeline/persistenceagent:2.0.0-alpha.500db9796a37b
k8s.io/kubernetes@v1.11.1
1.13.12
gcr.io/ml-pipeline/scheduledworkflow:2.0.0-alpha.5795a0c8a0e13
k8s.io/kubernetes@v1.11.1
1.13.12

Open the chart page →

96,941
rke2-multusrke2-charts3.7.1-build20210416011 of 2See more

rke2-multus rke2-charts 3.7.1-build2021041601

1 of the 2 container images this version deploys carry CVE-2019-11253.

Container imageDigestPackageFixed in
rancher/hardened-multus-cni:v3.7.1-build202104168eb8092f0728
k8s.io/kubernetes@v1.13.0
1.13.12

Open the chart page →

4,519
multusgeek-cookbookVerified publisher3.5.21 of 3See more

multus geek-cookbook 3.5.2

1 of the 3 container images this version deploys carry CVE-2019-11253.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/multus-cni:v3.7.1e72aa733faf2
k8s.io/kubernetes@v1.13.0
1.13.12

Open the chart page →

4,906
yataiyataiVerified publisher0.4.61 of 2See more

yatai yatai 0.4.6

1 of the 2 container images this version deploys carry CVE-2019-11253.

Container imageDigestPackageFixed in
quay.io/bentoml/yatai:0.4.614b482c1f1b8
k8s.io/kubernetes@v1.13.4
1.13.12

Open the chart page →

4,039
aws-efs-csi-driverkubesphere-testVerified publisher0.1.01 of 3See more

aws-efs-csi-driver kubesphere-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2019-11253.

Container imageDigestPackageFixed in
amazon/aws-efs-csi-driver:v0.3.0b55277652ea8
k8s.io/kubernetes@v1.16.1
1.16.2

Open the chart page →

2,603
hcloud-csi-driveratem181.5.11 of 6See more

hcloud-csi-driver atem18 1.5.1

1 of the 6 container images this version deploys carry CVE-2019-11253.

Container imageDigestPackageFixed in
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
k8s.io/kubernetes@v1.11.0-beta.2
1.13.12

Open the chart page →

6,491
external-service-operatorcrowdfox0.1.01 of 1See more

external-service-operator crowdfox 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-11253.

Container imageDigestPackageFixed in
crowdfox/external-service-operator:v1.1.06fa7e8063d27
k8s.io/kubernetes@v1.13.4
1.13.12

Open the chart page →

4,624
exa-csiexa-csi-driver0.2.0-rev21 of 6See more

exa-csi exa-csi-driver 0.2.0-rev2

1 of the 6 container images this version deploys carry CVE-2019-11253.

Container imageDigestPackageFixed in
quay.io/ddn/exascaler-csi-file-driver:v2.2.6fe2e2e5a2751
k8s.io/kubernetes@v1.14.1
1.14.8

Open the chart page →

7,048
kubeflowkromanow94-kubeflow0.5.14 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

4 of the 30 container images this version deploys carry CVE-2019-11253.

Container imageDigestPackageFixed in
gcr.io/ml-pipeline/api-server:2.3.039661bd823e8
k8s.io/kubernetes@v1.11.1
1.13.12
gcr.io/ml-pipeline/cache-server:2.3.0293941ee4f65
k8s.io/kubernetes@v1.11.1
1.13.12
gcr.io/ml-pipeline/persistenceagent:2.3.0109ac1b38c41
k8s.io/kubernetes@v1.11.1
1.13.12
gcr.io/ml-pipeline/scheduledworkflow:2.3.0f7e67e0bc071
k8s.io/kubernetes@v1.11.1
1.13.12

Open the chart page →

70,530
csi-qingcloudkubesphere-stable1.4.01 of 6See more

csi-qingcloud kubesphere-stable 1.4.0

1 of the 6 container images this version deploys carry CVE-2019-11253.

Container imageDigestPackageFixed in
csiplugin/csi-qingcloud:v1.4.00766163dc046
k8s.io/kubernetes@v1.14.1
1.14.8

Open the chart page →

12,402
curvefs-csikubesphere-stable0.1.01 of 3See more

curvefs-csi kubesphere-stable 0.1.0

1 of the 3 container images this version deploys carry CVE-2019-11253.

Container imageDigestPackageFixed in
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
k8s.io/kubernetes@v1.11.0-beta.2
1.13.12

Open the chart page →

2,822
csi-qingcloudkubesphere-testVerified publisher1.4.01 of 6See more

csi-qingcloud kubesphere-test 1.4.0

1 of the 6 container images this version deploys carry CVE-2019-11253.

Container imageDigestPackageFixed in
csiplugin/csi-qingcloud:v1.4.00766163dc046
k8s.io/kubernetes@v1.14.1
1.14.8

Open the chart page →

12,402
curvefs-csikubesphere-testVerified publisher0.1.01 of 3See more

curvefs-csi kubesphere-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2019-11253.

Container imageDigestPackageFixed in
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
k8s.io/kubernetes@v1.11.0-beta.2
1.13.12

Open the chart page →

2,822
gcpdisk-csi-drivermesosphere-stable0.7.31 of 7See more

gcpdisk-csi-driver mesosphere-stable 0.7.3

1 of the 7 container images this version deploys carry CVE-2019-11253.

Container imageDigestPackageFixed in
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
k8s.io/kubernetes@v1.11.0-beta.2
1.13.12

Open the chart page →

3,603
kommandermesosphere-stable0.39.21 of 29See more

kommander mesosphere-stable 0.39.2

1 of the 29 container images this version deploys carry CVE-2019-11253.

Container imageDigestPackageFixed in
gcr.io/kubecost1/server:prod-1.81.0a348db3e4d74
k8s.io/kubernetes@v1.14.1
1.14.8

Open the chart page →

68,284
gloo-meshsolo-gloo-mesh1.1.21 of 1See more

gloo-mesh solo-gloo-mesh 1.1.2

1 of the 1 container images this version deploys carry CVE-2019-11253.

Container imageDigestPackageFixed in
gcr.io/gloo-mesh/gloo-mesh:1.1.2a4011eae6a0b
k8s.io/kubernetes@v1.13.0
1.13.12

Open the chart page →

3,257
cost-analyzerstatcan1.82.21 of 9See more

cost-analyzer statcan 1.82.2

1 of the 9 container images this version deploys carry CVE-2019-11253.

Container imageDigestPackageFixed in
gcr.io/kubecost1/server:prod-1.82.22b1a3d08caac
k8s.io/kubernetes@v1.14.1
1.14.8

Open the chart page →

16,506

Container images carrying it

19 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
k8s.io/kubernetes@v1.11.0-beta.2
1.13.12
5
csiplugin/csi-qingcloud:v1.4.00766163dc046
k8s.io/kubernetes@v1.14.1
1.14.8
2
amazon/aws-efs-csi-driver:v0.3.0b55277652ea8
k8s.io/kubernetes@v1.16.1
1.16.2
1
crowdfox/external-service-operator:v1.1.06fa7e8063d27
k8s.io/kubernetes@v1.13.4
1.13.12
1
rancher/hardened-multus-cni:v3.7.1-build202104168eb8092f0728
k8s.io/kubernetes@v1.13.0
1.13.12
1
gcr.io/gloo-mesh/gloo-mesh:1.1.2a4011eae6a0b
k8s.io/kubernetes@v1.13.0
1.13.12
1
gcr.io/kubecost1/server:prod-1.82.22b1a3d08caac
k8s.io/kubernetes@v1.14.1
1.14.8
1
gcr.io/kubecost1/server:prod-1.81.0a348db3e4d74
k8s.io/kubernetes@v1.14.1
1.14.8
1
gcr.io/ml-pipeline/api-server:2.3.039661bd823e8
k8s.io/kubernetes@v1.11.1
1.13.12
1
gcr.io/ml-pipeline/api-server:2.0.0-alpha.5dc6ca05bb94f
k8s.io/kubernetes@v1.11.1
1.13.12
1
gcr.io/ml-pipeline/cache-server:2.3.0293941ee4f65
k8s.io/kubernetes@v1.11.1
1.13.12
1
gcr.io/ml-pipeline/cache-server:2.0.0-alpha.583e79c709df3
k8s.io/kubernetes@v1.11.1
1.13.12
1
gcr.io/ml-pipeline/persistenceagent:2.0.0-alpha.500db9796a37b
k8s.io/kubernetes@v1.11.1
1.13.12
1
gcr.io/ml-pipeline/persistenceagent:2.3.0109ac1b38c41
k8s.io/kubernetes@v1.11.1
1.13.12
1
gcr.io/ml-pipeline/scheduledworkflow:2.0.0-alpha.5795a0c8a0e13
k8s.io/kubernetes@v1.11.1
1.13.12
1
gcr.io/ml-pipeline/scheduledworkflow:2.3.0f7e67e0bc071
k8s.io/kubernetes@v1.11.1
1.13.12
1
ghcr.io/k8snetworkplumbingwg/multus-cni:v3.7.1e72aa733faf2
k8s.io/kubernetes@v1.13.0
1.13.12
1
quay.io/bentoml/yatai:0.4.614b482c1f1b8
k8s.io/kubernetes@v1.13.4
1.13.12
1
quay.io/ddn/exascaler-csi-file-driver:v2.2.6fe2e2e5a2751
k8s.io/kubernetes@v1.14.1
1.14.8
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.