{"action":"Upgrade k8s.io/kops to 1.25.4 or later.","affected":[{"fixed":"1.25.4","introduced":"0"},{"fixed":"1.26.2","introduced":"1.26.0"}],"component":"k8s.io/kops","cve_ids":["CVE-2023-1943"],"ecosystem":"Go","epss":0.00585,"exploited":false,"fixed_versions":["1.25.4","1.26.2"],"ghsa_id":"GHSA-8gwj-m6vh-2g6j","id":"tcs_01M5KF3RKS9PC30FHVWZCDPMK7","modified_at":"2024-08-21T14:56:58.067583Z","published_at":"2023-10-12T00:30:29Z","references":["https://osv.dev/vulnerability/GHSA-8gwj-m6vh-2g6j","https://nvd.nist.gov/vuln/detail/CVE-2023-1943","https://github.com/kubernetes/kops/issues/15539","https://github.com/kubernetes/kops","https://groups.google.com/g/kubernetes-security-announce/c/yrCE1x89oaU"],"severity":{"label":"high","score":8},"sources":[{"source":"osv","source_id":"GHSA-8gwj-m6vh-2g6j","url":"https://osv.dev/vulnerability/GHSA-8gwj-m6vh-2g6j"}],"summary":"kOps privilege escalation vulnerability"}