{"action":"Upgrade knative.dev/serving to 0.39.0 or later.","affected":[{"fixed":"0.39.0","introduced":"0"}],"component":"knative.dev/serving","cve_ids":["CVE-2023-48713"],"ecosystem":"Go","epss":0.00867,"exploited":false,"fixed_versions":["0.39.0"],"ghsa_id":"GHSA-qmvj-4qr9-v547","id":"tcs_01M5KFK89P84XDMMSAXJ3EHC68","modified_at":"2026-09-10T03:49:59.069796292Z","published_at":"2023-11-27T23:27:04Z","references":["https://osv.dev/vulnerability/GHSA-qmvj-4qr9-v547","https://github.com/knative/serving/security/advisories/GHSA-qmvj-4qr9-v547","https://nvd.nist.gov/vuln/detail/CVE-2023-48713","https://github.com/knative/serving/commit/012ee2509231b80b7842139bfabc30516d3026ca","https://github.com/knative/serving/commit/101f814112b9ca0767f457e7e616b46205551cf1","https://github.com/knative/serving/commit/fff40ef7bac9be8380ec3d1c70fc15b57093382a","https://github.com/knative/serving"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-qmvj-4qr9-v547","url":"https://osv.dev/vulnerability/GHSA-qmvj-4qr9-v547"}],"summary":"Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler"}