{"action":"Upgrade k8s.io/kubernetes to 1.18.18 or later.","affected":[{"fixed":"1.20.6","introduced":"1.20.0"},{"fixed":"1.19.10","introduced":"1.19.0"},{"fixed":"1.18.18","introduced":"0"}],"component":"k8s.io/kubernetes","cve_ids":["CVE-2021-25735"],"ecosystem":"Go","epss":0.05375,"exploited":false,"fixed_versions":["1.20.6","1.19.10","1.18.18"],"ghsa_id":"GHSA-g42g-737j-qx6j","id":"tcs_01M5KFA8D7374EGZF5VF1DB2BR","modified_at":"2026-09-10T03:49:26.789295488Z","published_at":"2021-05-28T19:49:59Z","references":["https://osv.dev/vulnerability/GHSA-g42g-737j-qx6j","https://nvd.nist.gov/vuln/detail/CVE-2021-25735","https://github.com/kubernetes/kubernetes/issues/100096","https://github.com/kubernetes/kubernetes/pull/99946","https://github.com/kubernetes/kubernetes/commit/00e81db174ef7aca497be5f42d87e46d14df2a90","https://bugzilla.redhat.com/show_bug.cgi?id=1937562","https://github.com/kubernetes/kubernetes","https://groups.google.com/g/kubernetes-security-announce/c/FKAGqT4jx9Y","https://pkg.go.dev/k8s.io/kubernetes@v1.23.5/cmd/kube-apiserver","https://sysdig.com/blog/cve-2021-25735-kubernetes-admission-bypass"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-g42g-737j-qx6j","url":"https://osv.dev/vulnerability/GHSA-g42g-737j-qx6j"}],"summary":"Access Restriction Bypass in kube-apiserver"}