Skip to content

chore(deps): update dependency kubernetesclient to v17 [security] - #241

Open
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/nuget-kubernetesclient-vulnerability
Open

chore(deps): update dependency kubernetesclient to v17 [security]#241
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/nuget-kubernetesclient-vulnerability

Conversation

@renovate

@renovate renovate Bot commented Sep 17, 2025

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
KubernetesClient 3.0.1617.0.14 age confidence

Kubernetes C# client accepts certificates from any CA without properly verifying the trust chain

CVE-2025-9708 / GHSA-w7r3-mgwf-4mqq

More information

Details

A vulnerability exists in the Kubernetes C# client where the certificate validation logic accepts properly constructed certificates from any Certificate Authority (CA) without properly verifying the trust chain. This flaw allows a malicious actor to present a forged certificate and potentially intercept or manipulate communication with the Kubernetes API server, leading to possible man-in-the-middle attacks and API impersonation.

Severity

  • CVSS Score: 6.8 / 10 (Medium)
  • Vector String: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).


Release Notes

kubernetes-client/csharp (KubernetesClient)

v17.0.14

What's Changed
New Contributors

Full Changelog: kubernetes-client/csharp@v17.0.4...v17.0.14

v17.0.4

What's Changed

Full Changelog: kubernetes-client/csharp@v16.0.7...v17.0.4

v16.0.7

What's Changed
New Contributors

Full Changelog: kubernetes-client/csharp@v16.0.6...v16.0.7

v16.0.2

What's Changed
New Contributors

Full Changelog: kubernetes-client/csharp@v16.0.1...v16.0.2

v16.0.1

What's Changed
New Contributors

Full Changelog: kubernetes-client/csharp@v15.0.1...v16.0.1

v15.0.1

What's Changed

Full Changelog: kubernetes-client/csharp@v14.0.12...v15.0.1

v14.0.12

What's Changed

Full Changelog: kubernetes-client/csharp@v14.0.8...v14.0.12

v14.0.2

What's Changed
New Contributors

Full Changelog: kubernetes-client/csharp@v13.0.37...v14.0.2

v13.0.37

What's Changed
New Contributors

Full Changelog: kubernetes-client/csharp@v13.0.26...v13.0.37

v13.0.26

What's Changed
New Contributors

Full Changelog: kubernetes-client/csharp@v13.0.23...v13.0.26

v13.0.11

What's Changed
New Contributors

Full Changelog: kubernetes-client/csharp@v13.0.1...v13.0.11

v13.0.1

What's Changed
New Contributors

Full Changelog: kubernetes-client/csharp@v12.1.1...v13.0.1

v12.1.1

What's Changed

Full Changelog: kubernetes-client/csharp@v12.0.16...v12.1.1

v12.0.16

What's Changed
New Contributors

Full Changelog: kubernetes-client/csharp@v11.0.44...v12.0.16

v11.0.44

What's Changed
New Contributors

Full Changelog: kubernetes-client/csharp@v11.0.36...v11.0.44

v11.0.36

What's Changed

Full Changelog: kubernetes-client/csharp@v11.0.21...v11.0.36

v11.0.21

What's Changed

Full Changelog: kubernetes-client/csharp@v11.0.7...v11.0.21

v11.0.9

What's Changed
New Contributors

Full Changelog: kubernetes-client/csharp@v10.1.19...v11.0.9

v10.1.19

What's Changed
New Contributors

Full Changelog: kubernetes-client/csharp@v10.1.4...v10.1.19

v10.1.4

What's Changed

Full Changelog: kubernetes-client/csharp@v10.0.31...v10.1.4

v10.0.31

What's Changed

Full Changelog: kubernetes-client/csharp@v10.0.27...v10.0.31

v10.0.27

What's Changed

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot changed the title chore(deps): update dependency kubernetesclient to v17 [security] chore(deps): update dependency kubernetesclient to v17 [security] - autoclosed Mar 27, 2026
@renovate renovate Bot closed this Mar 27, 2026
@renovate
renovate Bot deleted the renovate/nuget-kubernetesclient-vulnerability branch March 27, 2026 02:01
@renovate renovate Bot changed the title chore(deps): update dependency kubernetesclient to v17 [security] - autoclosed chore(deps): update dependency kubernetesclient to v17 [security] Mar 30, 2026
@renovate renovate Bot reopened this Mar 30, 2026
@renovate
renovate Bot force-pushed the renovate/nuget-kubernetesclient-vulnerability branch 2 times, most recently from 2179cc5 to 73bfe26 Compare March 30, 2026 20:38
@renovate renovate Bot changed the title chore(deps): update dependency kubernetesclient to v17 [security] chore(deps): update dependency kubernetesclient to v17 [security] - autoclosed Apr 27, 2026
@renovate renovate Bot closed this Apr 27, 2026
@renovate renovate Bot changed the title chore(deps): update dependency kubernetesclient to v17 [security] - autoclosed chore(deps): update dependency kubernetesclient to v17 [security] Apr 27, 2026
@renovate renovate Bot reopened this Apr 27, 2026
@renovate
renovate Bot force-pushed the renovate/nuget-kubernetesclient-vulnerability branch 2 times, most recently from 73bfe26 to a5c6dc4 Compare April 27, 2026 21:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants