{"action":"Upgrade k8s.io/kubernetes to 1.13.12 or later.","affected":[{"fixed":"1.13.12","introduced":"1.0.0"},{"fixed":"1.14.8","introduced":"1.14.0"},{"fixed":"1.15.5","introduced":"1.15.0"},{"fixed":"1.16.2","introduced":"1.16.0"}],"component":"k8s.io/kubernetes","cve_ids":["CVE-2019-11253"],"ecosystem":"Go","epss":0.25939,"exploited":false,"fixed_versions":["1.13.12","1.14.8","1.15.5","1.16.2"],"ghsa_id":"GHSA-pmqp-h87c-mr78","id":"tcs_01M5KFHK91T5NBDYY3SJNY0N53","modified_at":"2026-09-10T03:49:05.160246223Z","published_at":"2021-05-18T15:38:48Z","references":["https://osv.dev/vulnerability/GHSA-pmqp-h87c-mr78","https://nvd.nist.gov/vuln/detail/CVE-2019-11253","https://github.com/kubernetes/kubernetes/issues/83253","https://github.com/kubernetes/kubernetes/pull/83261","https://access.redhat.com/errata/RHSA-2019:3239","https://access.redhat.com/errata/RHSA-2019:3811","https://access.redhat.com/errata/RHSA-2019:3905","https://gist.github.com/bgeesaman/0e0349e94cd22c48bf14d8a9b7d6b8f2","https://groups.google.com/forum/#!topic/kubernetes-security-announce/jk8polzSUxs","https://pkg.go.dev/vuln/GO-2022-0703","https://security.netapp.com/advisory/ntap-20191031-0006"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-pmqp-h87c-mr78","url":"https://osv.dev/vulnerability/GHSA-pmqp-h87c-mr78"}],"summary":"XML Entity Expansion and Improper Input Validation in Kubernetes API server"}