{"action":"Upgrade k8s.io/kubernetes to 1.32.10 or later.","affected":[{"fixed":"1.32.10","introduced":"0"},{"fixed":"1.33.6","introduced":"1.33.0-alpha.0"},{"fixed":"1.34.2","introduced":"1.34.0-alpha.0"}],"component":"k8s.io/kubernetes","cve_ids":["CVE-2025-13281"],"ecosystem":"Go","epss":0.00389,"exploited":false,"fixed_versions":["1.32.10","1.33.6","1.34.2"],"ghsa_id":"GHSA-r6j8-c6r2-37rr","id":"tcs_01M5KFM7JHP1B1AQW3XJC4B7WJ","modified_at":"2026-09-10T03:50:58.823452441Z","published_at":"2025-12-15T00:30:25Z","references":["https://osv.dev/vulnerability/GHSA-r6j8-c6r2-37rr","https://nvd.nist.gov/vuln/detail/CVE-2025-13281","https://github.com/kubernetes/kubernetes/issues/135525","https://github.com/kubernetes/kubernetes/commit/7506ce804c20696ba32cdb72126270ceaed06e24","https://github.com/kubernetes/kubernetes/commit/97650c1c4fe15cbb7756ba95b3edc8a8665063ca","https://github.com/kubernetes/kubernetes/commit/dbe17dfe7773563eac95534040f413ada6d2b421","https://github.com/advisories/GHSA-r6j8-c6r2-37rr","https://github.com/kubernetes/kubernetes","https://groups.google.com/g/kubernetes-security-announce/c/EORqZg0k1l4/m/TtD-q0v7AgAJ","http://www.openwall.com/lists/oss-security/2025/12/01/4"],"severity":{"label":"medium","score":5.8},"sources":[{"source":"osv","source_id":"GHSA-r6j8-c6r2-37rr","url":"https://osv.dev/vulnerability/GHSA-r6j8-c6r2-37rr"}],"summary":"kube-controller-manager is vulnerable to half-blind Server Side Request Forgery through in-tree Portworx StorageClass"}