**Fixed Versions**:
  - kubelet v1.22.2
  - kubelet v1.21.5
  - kubelet v1.20.11
  - kubelet v1.19.15

This vulnerability was reported by Fabricio Voznika and Mark Wolters of Google.

**CVSS Rating:** High (8.8) [CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H](https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)

## Changes by Kind

### Feature

import org.codelibs.core.lang.ClassUtil;
import org.codelibs.core.lang.FieldUtil;
import org.codelibs.core.lang.StringUtil;

/**
 * Implementation class of {@link BeanDesc}.
 *
 * @author higa
 */
public class BeanDescImpl implements BeanDesc {

    /** Empty object array */
    protected static final Object[] EMPTY_ARGS = new Object[0];

    /** Empty class array */

 * </tr>
 * <tr>
 * <td>Other</td>
 * <td>{@link java.sql.Date#valueOf(String) Jdbc escape syntax} format</td>
 * <td>{@literal yyyy-MM-dd}</td>
 * </tr>
 * </table>
 *
 * @author higa
 * @see TimeConversionUtil
 * @see TimestampConversionUtil
 */
public abstract class DateConversionUtil {

    /**
     * Do not instantiate.
     */
    protected DateConversionUtil() {
    }

import java.util.Iterator;
import java.util.Map;
import java.util.NoSuchElementException;
import java.util.Set;

/**
 * A {@link Map} that combines the characteristics of an array.
 *
 * @author higa
 * @param <K> the type of keys
 * @param <V> the type of values
 *
 */
public class ArrayMap<K, V> extends AbstractMap<K, V> implements Map<K, V>, Cloneable, Externalizable {

import java.lang.reflect.Method;
import java.util.List;
import java.util.StringTokenizer;

/**
 * Utility class for string operations.
 *
 * @author higa
 * @author shinsuke
 */
public abstract class StringUtil {

    /**
     * Do not instantiate.
     */
    protected StringUtil() {
    }

    /**
     * A system line separator.
     */

import org.codelibs.core.exception.NoSuchFieldRuntimeException;
import org.codelibs.core.exception.NoSuchMethodRuntimeException;

/**
 * Utility class for {@link Class} operations.
 *
 * @author higa
 */
public abstract class ClassUtil {

    /**
     * Do not instantiate.
     */
    protected ClassUtil() {
    }

    /** Map from wrapper types to primitive types */

 * </p>
 *
 * <pre>
 * copyBeanToBean(srcBean, destBean, excludeNull().dateConverter("date", "MM/dd"));
 * </pre>
 *
 * @author Kimura Satoshi
 * @author higa
 * @author shinsuke
 * @see CopyOptionsUtil
 * @see CopyOptions
 */
public abstract class BeanUtil {

    /**
     * Do not instantiate.
     */
    protected BeanUtil() {
    }

import org.codelibs.core.beans.converter.NumberConverter;
import org.codelibs.core.exception.NullArgumentException;
import org.junit.Rule;
import org.junit.Test;
import org.junit.rules.ExpectedException;

/**
 * @author higa
 */
public class BeanUtilTest {

    /**
     * @see org.junit.rules.ExpectedException
     */
    @Rule
    public ExpectedException exception = ExpectedException.none();

    /**

import java.math.BigInteger;
import java.util.Arrays;
import java.util.List;

import org.codelibs.core.message.MessageFormatter;

/**
 * Utility class for array operations.
 *
 * @author higa
 */
public abstract class ArrayUtil {

    /**
     * Do not instantiate.
     */
    protected ArrayUtil() {
    }

    /**
     * Returns an array of {@literal boolean}.
     *

{\n  margin-top: $form-text-margin-top;\n  @include font-size($form-text-font-size);\n  font-style: $form-text-font-style;\n  font-weight: $form-text-font-weight;\n  color: $form-text-color;\n}\n","//\n// General form controls (plus a few specific high-level interventions)\n//\n\n.form-control {\n  display: block;\n  width: 100%;\n  padding: $input-padding-y $input-padding-x;\n  font-family: $input-font-family;\n  @include font-size($input-font-size);\n  font-weight: $input-font-weight;\n  line-height:...