{"action":"Upgrade k8s.io/kubernetes to 1.18.19 or later.","affected":[{"fixed":"1.18.19","introduced":"1.16.0"},{"fixed":"1.19.11","introduced":"1.19.0"},{"fixed":"1.20.7","introduced":"1.20.0"},{"fixed":"1.21.1","introduced":"1.21.0"}],"component":"k8s.io/kubernetes","cve_ids":["CVE-2021-25737"],"ecosystem":"Go","epss":0.01326,"exploited":false,"fixed_versions":["1.18.19","1.19.11","1.20.7","1.21.1"],"ghsa_id":"GHSA-mfv7-gq43-w965","id":"tcs_01M5KFFT02NYEQXA5434K41JBJ","modified_at":"2024-08-21T15:58:33.183449Z","published_at":"2021-09-07T23:09:24Z","references":["https://osv.dev/vulnerability/GHSA-mfv7-gq43-w965","https://nvd.nist.gov/vuln/detail/CVE-2021-25737","https://github.com/kubernetes/kubernetes/issues/102106","https://github.com/kubernetes/kubernetes","https://groups.google.com/g/kubernetes-security-announce/c/xAiN3924thY","https://security.netapp.com/advisory/ntap-20211004-0004"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GHSA-mfv7-gq43-w965","url":"https://osv.dev/vulnerability/GHSA-mfv7-gq43-w965"}],"summary":"Incomplete List of Disallowed Inputs in Kubernetes"}