{"action":"Upgrade github.com/projectcalico/calico to 3.8.9 or later.","affected":[{"fixed":"3.14.1","introduced":"3.14.0"},{"fixed":"3.13.4","introduced":"3.13.0"},{"fixed":"3.12.2","introduced":"3.12.0"},{"fixed":"3.11.3","introduced":"3.11.0"},{"fixed":"3.10.4","introduced":"3.10.0"},{"fixed":"3.9.6","introduced":"3.9.0"},{"fixed":"3.8.9","introduced":"0"}],"component":"github.com/projectcalico/calico","cve_ids":["CVE-2020-13597"],"ecosystem":"Go","epss":0.00902,"exploited":false,"fixed_versions":["3.14.1","3.13.4","3.12.2","3.11.3","3.10.4","3.9.6","3.8.9"],"ghsa_id":"GHSA-pf59-j7c2-rh6x","id":"tcs_01M5KFH9S01FA89G8H3VQTC872","modified_at":"2026-08-07T08:12:23.591761807Z","published_at":"2022-02-15T01:57:18Z","references":["https://osv.dev/vulnerability/GHSA-pf59-j7c2-rh6x","https://nvd.nist.gov/vuln/detail/CVE-2020-13597","https://github.com/kubernetes/kubernetes/issues/91507","https://github.com/containernetworking/plugins/pull/484","https://github.com/containernetworking/plugins/commit/ad10b6fa91aacd720f1f9ab94341a97a82a24965","https://github.com/projectcalico/calico","https://groups.google.com/forum/#!topic/kubernetes-security-announce/BMb_6ICCfp8","https://www.projectcalico.org/security-bulletins"],"severity":{"label":"medium","score":6},"sources":[{"source":"osv","source_id":"GHSA-pf59-j7c2-rh6x","url":"https://osv.dev/vulnerability/GHSA-pf59-j7c2-rh6x"}],"summary":"Exposure of Sensitive Information to an Unauthorized Actor and Insertion of Sensitive Information Into Sent Data in Calico"}