{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0.3.0","last_affected":"0.29.0"}],"component":"k8s.io/minikube","cve_ids":["CVE-2018-1002103"],"ecosystem":"Go","epss":0.00702,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-6pcv-qqx4-mxm3","id":"tcs_01M5KF0K1DQMGJYT7MD6FHJ2VE","modified_at":"2024-08-20T20:58:33.372871Z","published_at":"2022-05-13T01:35:04Z","references":["https://osv.dev/vulnerability/GHSA-6pcv-qqx4-mxm3","https://nvd.nist.gov/vuln/detail/CVE-2018-1002103","https://github.com/kubernetes/minikube/issues/3208"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-6pcv-qqx4-mxm3","url":"https://osv.dev/vulnerability/GHSA-6pcv-qqx4-mxm3"}],"summary":"Minikube RCE via DNS Rebinding"}