{"action":"Upgrade k8s.io/kubernetes to 1.21.0 or later.","affected":[{"fixed":"1.21.0","introduced":"0"}],"component":"k8s.io/kubernetes","cve_ids":["CVE-2021-25736"],"ecosystem":"Go","epss":0.00915,"exploited":false,"fixed_versions":["1.21.0"],"ghsa_id":"GHSA-35c7-w35f-xwgh","id":"tcs_01M5KET8FS1F1TEWT8C5K8C6FA","modified_at":"2026-09-10T03:50:03.384919778Z","published_at":"2023-10-30T03:30:15Z","references":["https://osv.dev/vulnerability/GHSA-35c7-w35f-xwgh","https://nvd.nist.gov/vuln/detail/CVE-2021-25736","https://github.com/kubernetes/kubernetes/pull/99958","https://github.com/kubernetes/kubernetes/commit/b014610de3e5cf1bb0f7844b5758d29fc18b75e6","https://github.com/kubernetes/kubernetes","https://groups.google.com/g/kubernetes-security-announce/c/lIoOPObO51Q/m/O15LOazPAgAJ","https://security.netapp.com/advisory/ntap-20231221-0003"],"severity":{"label":"medium","score":5.8},"sources":[{"source":"osv","source_id":"GHSA-35c7-w35f-xwgh","url":"https://osv.dev/vulnerability/GHSA-35c7-w35f-xwgh"}],"summary":"Kube-proxy may unintentionally forward traffic"}