{"action":"Upgrade k8s.io/client-go to 0.17.0 or later.","affected":[{"fixed":"0.17.0","introduced":"0"}],"component":"k8s.io/client-go","cve_ids":["CVE-2019-11250"],"ecosystem":"Go","epss":0.01766,"exploited":false,"fixed_versions":["0.17.0"],"ghsa_id":"GHSA-jmrx-5g74-6v2f","id":"tcs_01M5KFTAXKB7R9WHASW115FS0T","modified_at":"2026-02-04T04:03:12.393777Z","published_at":"2021-04-14T20:04:52Z","references":["https://osv.dev/vulnerability/GO-2021-0065","https://github.com/kubernetes/kubernetes/pull/81330","https://github.com/kubernetes/kubernetes/commit/4441f1d9c3e94d9a3d93b4f184a591cab02a5245","https://github.com/kubernetes/kubernetes/issues/81114"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2021-0065","url":"https://osv.dev/vulnerability/GO-2021-0065"}],"summary":"Unauthorized credential disclosure in k8s.io/kubernetes and k8s.io/client-go"}