{"action":"Upgrade k8s.io/kubernetes to 1.19.15 or later.","affected":[{"fixed":"1.19.15","introduced":"0"},{"fixed":"1.20.11","introduced":"1.20.0"},{"fixed":"1.21.5","introduced":"1.21.0"},{"fixed":"1.22.2","introduced":"1.22.0"}],"component":"k8s.io/kubernetes","cve_ids":["CVE-2021-25741"],"ecosystem":"Go","epss":0.07964,"exploited":false,"fixed_versions":["1.19.15","1.20.11","1.21.5","1.22.2"],"ghsa_id":"GHSA-f5f7-6478-qm6p","id":"tcs_01M5KF8D88AH8NJFJ76DN9JZ2Q","modified_at":"2026-09-10T03:49:09.725664982Z","published_at":"2021-11-01T17:32:28Z","references":["https://osv.dev/vulnerability/GHSA-f5f7-6478-qm6p","https://github.com/bottlerocket-os/bottlerocket/security/advisories/GHSA-f5f7-6478-qm6p","https://nvd.nist.gov/vuln/detail/CVE-2021-25741","https://github.com/kubernetes/kubernetes/issues/104980","https://github.com/kubernetes/kubernetes","https://groups.google.com/g/kubernetes-security-announce/c/nyfdhK24H7s","https://security.netapp.com/advisory/ntap-20211008-0006"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-f5f7-6478-qm6p","url":"https://osv.dev/vulnerability/GHSA-f5f7-6478-qm6p"}],"summary":"Files or Directories Accessible to External Parties in kubernetes"}