{"action":"Upgrade k8s.io/kube-state-metrics to 1.7.2 or later.","affected":[{"fixed":"1.7.2","introduced":"1.7.0"}],"component":"k8s.io/kube-state-metrics","cve_ids":["CVE-2019-10223","CVE-2019-17110"],"ecosystem":"Go","epss":0.0178,"exploited":false,"fixed_versions":["1.7.2"],"ghsa_id":"GHSA-2v6x-frw8-7r7f","id":"tcs_01M5KFWF8GB8T8RQTFZJ1A5QFH","modified_at":"2024-05-20T16:03:47Z","published_at":"2021-05-18T15:38:54Z","references":["https://osv.dev/vulnerability/GO-2022-0621","https://github.com/kubernetes/kube-state-metrics/commit/03122fe3e2df49a9a7298b8af921d3c37c430f7f"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GO-2022-0621","url":"https://osv.dev/vulnerability/GO-2022-0621"},{"source":"nvd","source_id":"CVE-2019-10223","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10223"}],"summary":"Exposure of sensitive information in k8s.io/kube-state-metrics"}