Low severity3.0NVD Advisory· Published Jan 7, 2022· Updated Jun 17, 2026

CVE-2021-25743

Description

kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not limited to the unstructured string fields in objects such as Events.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
k8s.io/kubernetesGo	< 1.26.0-alpha.3	1.26.0-alpha.3

Affected products

Cri O/Kubernetes5 versions
cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*range: <=1.25.0
- cpe:2.3:a:kubernetes:kubernetes:1.26.0:alpha0:*:*:*:*:*:*
- cpe:2.3:a:kubernetes:kubernetes:1.26.0:alpha1:*:*:*:*:*:*
- cpe:2.3:a:kubernetes:kubernetes:1.26.0:alpha2:*:*:*:*:*:*
- (no CPE)range: unspecified
osv-coords94 versions
pkg:apk/chainguard/argo-cd-2.7 pkg:apk/chainguard/argo-cd-2.7-compat pkg:apk/chainguard/argo-cd-2.7-repo-server pkg:apk/chainguard/argo-cd-2.8 pkg:apk/chainguard/argo-cd-2.8-compat pkg:apk/chainguard/argo-cd-2.8-repo-server pkg:apk/chainguard/argo-cd-2.9 pkg:apk/chainguard/argo-cd-2.9-compat pkg:apk/chainguard/argo-cd-2.9-repo-server pkg:apk/chainguard/argo-cd-fips-2.8 pkg:apk/chainguard/argo-cd-fips-2.8-compat pkg:apk/chainguard/argo-cd-fips-2.8-repo-server pkg:apk/chainguard/argo-cd-fips-2.9 pkg:apk/chainguard/argo-cd-fips-2.9-compat pkg:apk/chainguard/argo-cd-fips-2.9-repo-server pkg:apk/chainguard/aws-efs-csi-driver pkg:apk/chainguard/aws-efs-csi-driver-fips pkg:apk/chainguard/cluster-autoscaler-1.25 pkg:apk/chainguard/cluster-autoscaler-1.25-compat pkg:apk/chainguard/kubeflow-pipelines pkg:apk/chainguard/kubeflow-pipelines-apiserver pkg:apk/chainguard/kubeflow-pipelines-cache-deployer pkg:apk/chainguard/kubeflow-pipelines-cache-deployer-compat pkg:apk/chainguard/kubeflow-pipelines-cache_server pkg:apk/chainguard/kubeflow-pipelines-frontend pkg:apk/chainguard/kubeflow-pipelines-metadata-envoy-config pkg:apk/chainguard/kubeflow-pipelines-metadata-writer pkg:apk/chainguard/kubeflow-pipelines-metadata-writer-compat pkg:apk/chainguard/kubeflow-pipelines-persistence_agent pkg:apk/chainguard/kubeflow-pipelines-scheduledworkflow pkg:apk/chainguard/kubeflow-pipelines-viewer-crd-controller pkg:apk/chainguard/kubernetes-dns-node-cache pkg:apk/chainguard/kubernetes-dns-node-cache-1.17 pkg:apk/chainguard/nodetaint pkg:apk/chainguard/spark-operator pkg:apk/chainguard/spark-operator-oci-entrypoint pkg:apk/chainguard/sparkctl pkg:apk/wolfi/argo-cd-2.7 pkg:apk/wolfi/argo-cd-2.7-compat pkg:apk/wolfi/argo-cd-2.7-repo-server pkg:apk/wolfi/argo-cd-2.8 pkg:apk/wolfi/argo-cd-2.8-compat pkg:apk/wolfi/argo-cd-2.8-repo-server pkg:apk/wolfi/argo-cd-2.9 pkg:apk/wolfi/argo-cd-2.9-compat pkg:apk/wolfi/argo-cd-2.9-repo-server pkg:apk/wolfi/aws-efs-csi-driver pkg:apk/wolfi/cluster-autoscaler-1.25 pkg:apk/wolfi/cluster-autoscaler-1.25-compat pkg:apk/wolfi/kubeflow-pipelines pkg:apk/wolfi/kubeflow-pipelines-apiserver pkg:apk/wolfi/kubeflow-pipelines-cache-deployer pkg:apk/wolfi/kubeflow-pipelines-cache-deployer-compat pkg:apk/wolfi/kubeflow-pipelines-cache_server pkg:apk/wolfi/kubeflow-pipelines-frontend pkg:apk/wolfi/kubeflow-pipelines-metadata-envoy-config pkg:apk/wolfi/kubeflow-pipelines-metadata-writer pkg:apk/wolfi/kubeflow-pipelines-metadata-writer-compat pkg:apk/wolfi/kubeflow-pipelines-persistence_agent pkg:apk/wolfi/kubeflow-pipelines-scheduledworkflow pkg:apk/wolfi/kubeflow-pipelines-viewer-crd-controller pkg:apk/wolfi/kubernetes-dns-node-cache pkg:apk/wolfi/nodetaint pkg:apk/wolfi/spark-operator pkg:apk/wolfi/spark-operator-oci-entrypoint pkg:apk/wolfi/sparkctl pkg:golang/k8s.io/kubernetes pkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/kubernetes1.23&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/kubernetes1.23&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/kubernetes1.24&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/kubernetes1.24&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/kubernetes1.25&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/kubernetes1.25&distro=openSUSE%20Leap%2015.6 pkg:rpm/suse/kubernetes1.23&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/kubernetes1.23&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/kubernetes1.23&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/kubernetes1.23&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/kubernetes1.23&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Containers%2015%20SP5 pkg:rpm/suse/kubernetes1.23&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/kubernetes1.23&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS pkg:rpm/suse/kubernetes1.23&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/kubernetes1.23&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4 pkg:rpm/suse/kubernetes1.24&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/kubernetes1.24&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/kubernetes1.24&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/kubernetes1.24&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/kubernetes1.24&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Containers%2015%20SP5 pkg:rpm/suse/kubernetes1.24&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/kubernetes1.24&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS pkg:rpm/suse/kubernetes1.24&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/kubernetes1.24&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4 pkg:rpm/suse/kubernetes1.25&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Containers%2015%20SP5 pkg:rpm/suse/kubernetes1.25&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Containers%2015%20SP6
< 0+ 93 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 2.1.14-r1
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 1.26.0-alpha.3
- (no CPE)range: < 0.0.20250807T150727-1.1
- (no CPE)range: < 1.23.17-150500.3.15.1
- (no CPE)range: < 1.23.17-150500.3.15.1
- (no CPE)range: < 1.24.17-150500.3.19.1
- (no CPE)range: < 1.24.17-150500.3.19.1
- (no CPE)range: < 1.25.16-150400.9.10.1
- (no CPE)range: < 1.25.16-150400.9.10.1
- (no CPE)range: < 1.23.17-150300.7.12.1
- (no CPE)range: < 1.23.17-150300.7.12.1
- (no CPE)range: < 1.23.17-150300.7.12.1
- (no CPE)range: < 1.23.17-150300.7.12.1
- (no CPE)range: < 1.23.17-150500.3.15.1
- (no CPE)range: < 1.23.17-150300.7.12.1
- (no CPE)range: < 1.23.17-150300.7.12.1
- (no CPE)range: < 1.23.17-150300.7.12.1
- (no CPE)range: < 1.23.17-150300.7.12.1
- (no CPE)range: < 1.24.17-150300.7.6.1
- (no CPE)range: < 1.24.17-150300.7.6.1
- (no CPE)range: < 1.24.17-150400.9.16.1
- (no CPE)range: < 1.24.17-150400.9.16.1
- (no CPE)range: < 1.24.17-150500.3.19.1
- (no CPE)range: < 1.24.17-150300.7.6.1
- (no CPE)range: < 1.24.17-150400.9.16.1
- (no CPE)range: < 1.24.17-150300.7.6.1
- (no CPE)range: < 1.24.17-150400.9.16.1
- (no CPE)range: < 1.25.16-150400.9.10.1
- (no CPE)range: < 1.25.16-150400.9.10.1

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-f9jg-8p32-2f55ghsaADVISORY
github.com/kubernetes/kubernetes/issues/101695nvdVendor AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2021-25743ghsaADVISORY
security.netapp.com/advisory/ntap-20220217-0003/nvdThird Party Advisory
github.com/kubernetes/kubernetes/commit/dad0e937c0f76344363eb691b2668490ffef8537ghsaWEB
github.com/kubernetes/kubernetes/pull/112553ghsaWEB
security.netapp.com/advisory/ntap-20220217-0003ghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.195
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000