{"action":"Upgrade k8s.io/kube-state-metrics to 1.7.2 or later.","affected":[{"fixed":"1.7.2","introduced":"1.7.0"}],"component":"k8s.io/kube-state-metrics","cve_ids":["CVE-2019-10223","CVE-2019-17110"],"ecosystem":"Go","epss":0.0178,"exploited":false,"fixed_versions":["1.7.2"],"ghsa_id":"GHSA-c92w-72c5-9x59","id":"tcs_01M5KF723S1B0F5FMVSN0BSXEN","modified_at":"2023-11-08T04:00:43.469724Z","published_at":"2022-05-24T17:00:21Z","references":["https://osv.dev/vulnerability/GHSA-c92w-72c5-9x59","https://nvd.nist.gov/vuln/detail/CVE-2019-10223","https://github.com/kubernetes/kube-state-metrics/commit/03122fe3e2df49a9a7298b8af921d3c37c430f7f","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10223","https://github.com/kubernetes/kube-state-metrics","https://github.com/kubernetes/kube-state-metrics/releases/tag/v1.7.2","https://pkg.go.dev/vuln/GO-2022-0621","https://www.openwall.com/lists/oss-security/2019/08/09/1","http://www.openwall.com/lists/oss-security/2019/08/15/8"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-c92w-72c5-9x59","url":"https://osv.dev/vulnerability/GHSA-c92w-72c5-9x59"}],"summary":"kube-state-metrics may expose secret content in metrics"}