{"action":"Upgrade k8s.io/kubernetes to 1.12.5 or later.","affected":[{"fixed":"1.12.5","introduced":"1.12.0"},{"fixed":"1.13.1","introduced":"1.13.0"}],"component":"k8s.io/kubernetes","cve_ids":["CVE-2019-11243"],"ecosystem":"Go","epss":0.01492,"exploited":false,"fixed_versions":["1.12.5","1.13.1"],"ghsa_id":"GHSA-gc2p-g4fg-29vh","id":"tcs_01M5KFASAHA20RB8PC85Y41AXQ","modified_at":"2025-05-05T16:41:57.914022Z","published_at":"2022-05-24T16:44:02Z","references":["https://osv.dev/vulnerability/GHSA-gc2p-g4fg-29vh","https://nvd.nist.gov/vuln/detail/CVE-2019-11243","https://github.com/kubernetes/kubernetes/issues/76797","https://github.com/kubernetes/kubernetes","https://security.netapp.com/advisory/ntap-20190509-0002"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-gc2p-g4fg-29vh","url":"https://osv.dev/vulnerability/GHSA-gc2p-g4fg-29vh"}],"summary":"Kubernetes did not effectively clear service account credentials"}