{"action":"Upgrade k8s.io/kubernetes to 1.31.12 or later.","affected":[{"fixed":"1.31.12","introduced":"0"},{"fixed":"1.32.8","introduced":"1.32.0-alpha.0"},{"fixed":"1.33.4","introduced":"1.33.0-alpha.0"}],"component":"k8s.io/kubernetes","cve_ids":["CVE-2025-5187"],"ecosystem":"Go","epss":0.00574,"exploited":false,"fixed_versions":["1.31.12","1.32.8","1.33.4"],"ghsa_id":"GHSA-4x4m-3c2p-qppc","id":"tcs_01M5KEXCDAHWS65M5NN2M9896T","modified_at":"2026-09-10T03:50:26.670712042Z","published_at":"2025-08-27T18:31:55Z","references":["https://osv.dev/vulnerability/GHSA-4x4m-3c2p-qppc","https://nvd.nist.gov/vuln/detail/CVE-2025-5187","https://github.com/kubernetes/kubernetes/issues/133471","https://github.com/kubernetes/kubernetes/commit/a2d98cac56a0c5cb2d8abc4d087fc00846b3bc0f","https://github.com/kubernetes/kubernetes","https://groups.google.com/g/kubernetes-security-announce/c/znSNY7XCztE"],"severity":{"label":"medium","score":6.7},"sources":[{"source":"osv","source_id":"GHSA-4x4m-3c2p-qppc","url":"https://osv.dev/vulnerability/GHSA-4x4m-3c2p-qppc"}],"summary":"Kubernetes Nodes can delete themselves by adding an OwnerReference"}