{"action":"Upgrade k8s.io/kubernetes to 1.13.12 or later.","affected":[{"fixed":"1.13.12","introduced":"1.0.0"},{"fixed":"1.14.8","introduced":"1.14.0"},{"fixed":"1.15.5","introduced":"1.15.0"},{"fixed":"1.16.2","introduced":"1.16.0"}],"component":"k8s.io/kubernetes","cve_ids":["CVE-2019-11253"],"ecosystem":"Go","epss":0.25939,"exploited":false,"fixed_versions":["1.13.12","1.14.8","1.15.5","1.16.2"],"ghsa_id":"GHSA-pmqp-h87c-mr78","id":"tcs_01M5KFWKC5A1DWGTCQCT050H6K","modified_at":"2026-02-04T02:27:31.453406Z","published_at":"2024-08-21T15:21:45Z","references":["https://osv.dev/vulnerability/GO-2022-0703","https://github.com/advisories/GHSA-pmqp-h87c-mr78","https://access.redhat.com/errata/RHSA-2019:3239","https://access.redhat.com/errata/RHSA-2019:3811","https://access.redhat.com/errata/RHSA-2019:3905","https://gist.github.com/bgeesaman/0e0349e94cd22c48bf14d8a9b7d6b8f2","https://github.com/kubernetes/kubernetes/issues/83253","https://github.com/kubernetes/kubernetes/pull/83261","https://groups.google.com/forum/#!topic/kubernetes-security-announce/jk8polzSUxs","https://security.netapp.com/advisory/ntap-20191031-0006"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2022-0703","url":"https://osv.dev/vulnerability/GO-2022-0703"}],"summary":"XML Entity Expansion and Improper Input Validation in Kubernetes API server in k8s.io/kubernetes"}