{"action":"Upgrade k8s.io/kubernetes to 1.24.15 or later.","affected":[{"fixed":"1.27.3","introduced":"1.27.0"},{"fixed":"1.26.6","introduced":"1.26.0"},{"fixed":"1.25.11","introduced":"1.25.0"},{"fixed":"1.24.15","introduced":"0"}],"component":"k8s.io/kubernetes","cve_ids":["CVE-2023-2728"],"ecosystem":"Go","epss":0.02157,"exploited":false,"fixed_versions":["1.27.3","1.26.6","1.25.11","1.24.15"],"ghsa_id":"GHSA-cgcv-5272-97pr","id":"tcs_01M5KF794JNM6AP01V18V8P8X0","modified_at":"2026-09-10T03:49:57.264938403Z","published_at":"2023-07-03T21:30:57Z","references":["https://osv.dev/vulnerability/GHSA-cgcv-5272-97pr","https://nvd.nist.gov/vuln/detail/CVE-2023-2728","https://github.com/kubernetes/kubernetes/issues/118640","https://github.com/kubernetes/kubernetes/pull/118356","https://github.com/kubernetes/kubernetes/pull/118471","https://github.com/kubernetes/kubernetes/pull/118473","https://github.com/kubernetes/kubernetes/pull/118474","https://github.com/kubernetes/kubernetes/pull/118512","https://github.com/kubernetes/kubernetes","https://groups.google.com/g/kubernetes-security-announce/c/vPWYJ_L84m8","https://security.netapp.com/advisory/ntap-20230803-0004","http://www.openwall.com/lists/oss-security/2023/07/06/3"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-cgcv-5272-97pr","url":"https://osv.dev/vulnerability/GHSA-cgcv-5272-97pr"}],"summary":"Kubernetes mountable secrets policy bypass"}