{"action":"Upgrade k8s.io/client-go to 0.20.0-alpha.2 or later.","affected":[{"fixed":"0.20.0-alpha.2","introduced":"0"}],"component":"k8s.io/client-go","cve_ids":["CVE-2020-8565"],"ecosystem":"Go","epss":0.00518,"exploited":false,"fixed_versions":["0.20.0-alpha.2"],"ghsa_id":"GHSA-8cfg-vx93-jvxw","id":"tcs_01M5KFTARS8PZMCXESNJ5KTC3H","modified_at":"2026-02-04T02:20:03.995689Z","published_at":"2021-04-14T20:04:52Z","references":["https://osv.dev/vulnerability/GO-2021-0064","https://github.com/kubernetes/kubernetes/pull/95316","https://github.com/kubernetes/kubernetes/commit/e99df0e5a75eb6e86123b56d53e9b7ca0fd00419","https://github.com/kubernetes/kubernetes/issues/95623"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2021-0064","url":"https://osv.dev/vulnerability/GO-2021-0064"}],"summary":"Unauthorized credential disclosure via debug logs in k8s.io/kubernetes and k8s.io/client-go"}