[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2021-25735":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T14:55:33.319Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":34,"aliases":35,"duplicate_of":9,"upstream":38,"downstream":39,"duplicates":48,"related":49,"reserved_at":9,"published_at":57,"modified_at":58,"state":59,"summary":60,"references_raw":68,"kevs":118,"epss":119,"epss_history":122,"metrics":380,"affected":395},"CVE-2021-25735","A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Admission Webhook for Nodes that denies admission based at least partially on the old state of the Node object. Validating Admission Webhook does not observe some previous fields.",null,[11,18],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":9,"likelihood_of_exploit":9,"capec":17},"NVD-CWE-OTHER","Other","NVD uses this CWE ID when the weakness does not map to any existing CWE entry.","placeholder","NVD-Reserved",[],{"_key":19,"id":19,"name":20,"description":21,"type":22,"status":23,"abstraction":24,"likelihood_of_exploit":9,"capec":25},"CWE-372","Incomplete Internal State Distinction","The product does not properly determine which state it is in, causing it to assume it is in state X when in fact it is in state Y, causing it to perform incorrect operations in a security-relevant manner.","weakness","Draft","Base",[26,30],{"id":27,"name":28,"techniques":29},"CAPEC-140","Bypassing of Intermediate Forms in Multiple-Form Sets",[],{"id":31,"name":32,"techniques":33},"CAPEC-74","Manipulating State",[],[],[36,37],"GHSA-g42g-737j-qx6j","GO-2022-0907",[],[40,42,44,46],{"_key":41},"UBUNTU-CVE-2021-25735",{"_key":43},"OPENSUSE-SU-2025:15424-1",{"_key":45},"RHSA-2021:2437",{"_key":47},"DEBIAN-CVE-2021-25735",[],[50,51,53,55],{"_key":43},{"_key":52},"CGA-QJP2-X4CG-M2WC",{"_key":54},"CGA-VPJ9-GFPP-X28X",{"_key":56},"CGA-5RXH-9V6C-96VF","2021-09-06T11:32:00.853Z","2024-09-16T23:40:25.902Z","Modified",{"cisa_kev":61,"cisa_ransomware":61,"cisa_vendor":9,"epss_severity":62,"epss_score":63,"severity":62,"severity_score":64,"severity_version":65,"severity_source":66,"severity_vector":67,"severity_status":59},false,"medium",0.16302,6.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",[69,79,84,89,93,97,101,106,110,114],{"url":70,"sources":71,"tags":74},"https://groups.google.com/g/kubernetes-security-announce/c/FKAGqT4jx9Y",[66,72,73],"nvd","osv_go",[75,76,77,78],"X Refsource MISC","Mailing List","Third Party Advisory","WEB",{"url":80,"sources":81,"tags":82},"https://github.com/kubernetes/kubernetes/issues/100096",[66,72,73],[75,83,77,78],"Patch",{"url":85,"sources":86,"tags":87},"https://nvd.nist.gov/vuln/detail/CVE-2021-25735",[73],[88],"Advisory",{"url":90,"sources":91,"tags":92},"https://github.com/kubernetes/kubernetes/pull/99946",[73],[78],{"url":94,"sources":95,"tags":96},"https://github.com/kubernetes/kubernetes/commit/00e81db174ef7aca497be5f42d87e46d14df2a90",[73],[78],{"url":98,"sources":99,"tags":100},"https://bugzilla.redhat.com/show_bug.cgi?id=1937562",[73],[78],{"url":102,"sources":103,"tags":104},"https://github.com/kubernetes/kubernetes",[73],[105],"PACKAGE",{"url":107,"sources":108,"tags":109},"https://pkg.go.dev/k8s.io/kubernetes@v1.23.5/cmd/kube-apiserver",[73],[78],{"url":111,"sources":112,"tags":113},"https://sysdig.com/blog/cve-2021-25735-kubernetes-admission-bypass",[73],[78],{"url":115,"sources":116,"tags":117},"https://github.com/advisories/GHSA-g42g-737j-qx6j",[73],[88],[],{"date":120,"score":63,"percentile":121},"2026-06-04",0.94954,[123,127,130,133,136,138,141,143,146,149,152,155,157,160,162,166,169,172,175,178,181,183,186,189,192,194,197,199,202,205,208,210,213,215,219,222,225,228,231,234,236,239,242,245,248,251,253,256,258,260,263,266,269,272,275,278,281,284,287,290,293,296,299,303,306,308,311,314,317,320,323,325,328,331,334,337,340,343,345,348,351,354,357,360,363,366,369,372,374,377],{"date":124,"score":125,"percentile":126},"2025-11-04",0.22229,0.95557,{"date":128,"score":125,"percentile":129},"2025-11-05",0.95556,{"date":131,"score":125,"percentile":132},"2025-11-06",0.95559,{"date":134,"score":125,"percentile":135},"2025-11-07",0.95561,{"date":137,"score":125,"percentile":132},"2025-11-08",{"date":139,"score":125,"percentile":140},"2025-11-09",0.95558,{"date":142,"score":125,"percentile":132},"2025-11-10",{"date":144,"score":125,"percentile":145},"2025-11-11",0.9556,{"date":147,"score":125,"percentile":148},"2025-11-12",0.95563,{"date":150,"score":125,"percentile":151},"2025-11-13",0.95565,{"date":153,"score":125,"percentile":154},"2025-11-14",0.95566,{"date":156,"score":125,"percentile":148},"2025-11-15",{"date":158,"score":125,"percentile":159},"2025-11-16",0.95564,{"date":161,"score":125,"percentile":154},"2025-11-17",{"date":163,"score":164,"percentile":165},"2025-11-18",0.19558,0.94992,{"date":167,"score":164,"percentile":168},"2025-11-19",0.94994,{"date":170,"score":164,"percentile":171},"2025-11-20",0.94999,{"date":173,"score":125,"percentile":174},"2025-11-21",0.95575,{"date":176,"score":125,"percentile":177},"2025-11-22",0.95573,{"date":179,"score":125,"percentile":180},"2025-11-23",0.95572,{"date":182,"score":125,"percentile":177},"2025-11-24",{"date":184,"score":125,"percentile":185},"2025-11-25",0.95576,{"date":187,"score":125,"percentile":188},"2025-11-26",0.95577,{"date":190,"score":125,"percentile":191},"2025-11-27",0.95579,{"date":193,"score":125,"percentile":188},"2025-11-28",{"date":195,"score":125,"percentile":196},"2025-11-29",0.9558,{"date":198,"score":125,"percentile":191},"2025-11-30",{"date":200,"score":125,"percentile":201},"2025-12-01",0.95612,{"date":203,"score":125,"percentile":204},"2025-12-02",0.95611,{"date":206,"score":125,"percentile":207},"2025-12-03",0.95614,{"date":209,"score":125,"percentile":191},"2025-12-04",{"date":211,"score":125,"percentile":212},"2025-12-05",0.95581,{"date":214,"score":125,"percentile":212},"2025-12-06",{"date":216,"score":217,"percentile":218},"2025-12-07",0.17636,0.94846,{"date":220,"score":217,"percentile":221},"2025-12-08",0.94844,{"date":223,"score":217,"percentile":224},"2025-12-09",0.94849,{"date":226,"score":217,"percentile":227},"2025-12-10",0.94856,{"date":229,"score":217,"percentile":230},"2025-12-11",0.94859,{"date":232,"score":217,"percentile":233},"2025-12-12",0.94861,{"date":235,"score":217,"percentile":233},"2025-12-13",{"date":237,"score":217,"percentile":238},"2025-12-14",0.9486,{"date":240,"score":217,"percentile":241},"2025-12-15",0.94864,{"date":243,"score":217,"percentile":244},"2025-12-16",0.94866,{"date":246,"score":217,"percentile":247},"2025-12-17",0.94868,{"date":249,"score":217,"percentile":250},"2025-12-18",0.9487,{"date":252,"score":217,"percentile":250},"2025-12-19",{"date":254,"score":217,"percentile":255},"2025-12-20",0.94871,{"date":257,"score":217,"percentile":255},"2025-12-21",{"date":259,"score":217,"percentile":250},"2025-12-22",{"date":261,"score":217,"percentile":262},"2025-12-23",0.94869,{"date":264,"score":217,"percentile":265},"2025-12-24",0.94874,{"date":267,"score":217,"percentile":268},"2025-12-25",0.9488,{"date":270,"score":217,"percentile":271},"2025-12-26",0.94881,{"date":273,"score":217,"percentile":274},"2025-12-27",0.94906,{"date":276,"score":217,"percentile":277},"2025-12-28",0.94876,{"date":279,"score":217,"percentile":280},"2025-12-29",0.94877,{"date":282,"score":217,"percentile":283},"2025-12-30",0.94879,{"date":285,"score":217,"percentile":286},"2025-12-31",0.94882,{"date":288,"score":217,"percentile":289},"2026-01-01",0.94924,{"date":291,"score":217,"percentile":292},"2026-01-02",0.94919,{"date":294,"score":217,"percentile":295},"2026-01-03",0.94917,{"date":297,"score":217,"percentile":298},"2026-01-04",0.94878,{"date":300,"score":301,"percentile":302},"2026-01-05",0.15581,0.94459,{"date":304,"score":301,"percentile":305},"2026-01-06",0.9446,{"date":307,"score":301,"percentile":305},"2026-01-07",{"date":309,"score":301,"percentile":310},"2026-01-08",0.94464,{"date":312,"score":301,"percentile":313},"2026-01-09",0.94465,{"date":315,"score":301,"percentile":316},"2026-01-10",0.94466,{"date":318,"score":301,"percentile":319},"2026-01-11",0.94463,{"date":321,"score":301,"percentile":322},"2026-01-12",0.94462,{"date":324,"score":301,"percentile":319},"2026-01-13",{"date":326,"score":301,"percentile":327},"2026-01-14",0.94467,{"date":329,"score":301,"percentile":330},"2026-01-15",0.94468,{"date":332,"score":301,"percentile":333},"2026-01-16",0.94471,{"date":335,"score":301,"percentile":336},"2026-01-17",0.94474,{"date":338,"score":301,"percentile":339},"2026-01-18",0.94472,{"date":341,"score":301,"percentile":342},"2026-01-19",0.94469,{"date":344,"score":301,"percentile":336},"2026-01-20",{"date":346,"score":301,"percentile":347},"2026-01-21",0.94475,{"date":349,"score":301,"percentile":350},"2026-01-22",0.94479,{"date":352,"score":301,"percentile":353},"2026-01-23",0.94486,{"date":355,"score":301,"percentile":356},"2026-01-24",0.9449,{"date":358,"score":301,"percentile":359},"2026-01-25",0.94491,{"date":361,"score":301,"percentile":362},"2026-01-26",0.94494,{"date":364,"score":301,"percentile":365},"2026-01-27",0.94493,{"date":367,"score":301,"percentile":368},"2026-01-28",0.94497,{"date":370,"score":301,"percentile":371},"2026-01-29",0.94499,{"date":373,"score":301,"percentile":371},"2026-01-30",{"date":375,"score":301,"percentile":376},"2026-01-31",0.945,{"date":378,"score":301,"percentile":379},"2026-02-01",0.94536,[381,386,393],{"source":66,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":382,"cvss_v4_0":9},{"baseScore":64,"baseSeverity":383,"vectorString":67,"impactScore":384,"exploitabilityScore":385},"MEDIUM",8.7,3.1,{"source":72,"cvss_v2_0":387,"cvss_v3_0":9,"cvss_v3_1":392,"cvss_v4_0":9},{"baseScore":388,"baseSeverity":9,"vectorString":389,"impactScore":390,"exploitabilityScore":391},5.5,"AV:N/AC:L/Au:S/C:N/I:P/A:P",4.9,8,{"baseScore":64,"baseSeverity":383,"vectorString":67,"impactScore":384,"exploitabilityScore":385},{"source":73,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":394,"cvss_v4_0":9},{"baseScore":64,"baseSeverity":9,"vectorString":67,"impactScore":384,"exploitabilityScore":385},[396,418],{"ecosystem":397,"name":398,"vendor":399,"product":400,"cpe_part":9,"purl_type":401,"purl_namespace":399,"purl_name":400,"source":9,"versions":402},"Go","k8s.io/kubernetes","k8s.io","kubernetes","golang",[403,411,414],{"version":404,"is_range":405,"range_type":406,"version_start":407,"version_start_type":408,"version_end":409,"version_end_type":410,"fixed_in":9},"gte1_19_0_lt1_19_10",true,"semver","1.19.0","including","1.19.10","excluding",{"version":412,"is_range":405,"range_type":406,"version_start":9,"version_start_type":9,"version_end":413,"version_end_type":410,"fixed_in":9},"lt1_18_18","1.18.18",{"version":415,"is_range":405,"range_type":406,"version_start":416,"version_start_type":408,"version_end":417,"version_end_type":410,"fixed_in":9},"gte1_20_0_lt1_20_6","1.20.0","1.20.6",{"ecosystem":9,"name":400,"vendor":400,"product":400,"cpe_part":419,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":420},"a",[421,424,426,428,432,435],{"version":422,"is_range":405,"range_type":423,"version_start":9,"version_start_type":9,"version_end":413,"version_end_type":410,"fixed_in":9},"lt1.18.18","cpe",{"version":425,"is_range":405,"range_type":423,"version_start":407,"version_start_type":408,"version_end":409,"version_end_type":410,"fixed_in":9},"gte1.19.0_lt1.19.10",{"version":427,"is_range":405,"range_type":423,"version_start":416,"version_start_type":408,"version_end":417,"version_end_type":410,"fixed_in":9},"gte1.20.0_lt1.20.6",{"version":429,"is_range":405,"range_type":66,"version_start":430,"version_start_type":408,"version_end":431,"version_end_type":408,"fixed_in":9},">= unspecified, \u003C= 1.18.17","unspecified","1.18.17",{"version":433,"is_range":405,"range_type":66,"version_start":430,"version_start_type":408,"version_end":434,"version_end_type":408,"fixed_in":9},">= unspecified, \u003C= 1.19.9","1.19.9",{"version":436,"is_range":405,"range_type":66,"version_start":430,"version_start_type":408,"version_end":437,"version_end_type":408,"fixed_in":9},">= unspecified, \u003C= 1.20.5","1.20.5"]