{"action":"Upgrade k8s.io/kubernetes to 1.9.10 or later.","affected":[{"fixed":"1.9.10","introduced":"1.9.0"},{"fixed":"1.10.6","introduced":"1.10.0"},{"fixed":"1.11.2","introduced":"1.11.0"}],"component":"k8s.io/kubernetes","cve_ids":["CVE-2018-1002101"],"ecosystem":"Go","epss":0.03996,"exploited":false,"fixed_versions":["1.9.10","1.10.6","1.11.2"],"ghsa_id":"GHSA-wqwf-x5cj-rg56","id":"tcs_01M5KFX6X4R3EJNTTWARYK0HYB","modified_at":"2026-02-04T03:07:40.015751Z","published_at":"2024-08-21T15:29:06Z","references":["https://osv.dev/vulnerability/GO-2022-0886","https://github.com/advisories/GHSA-wqwf-x5cj-rg56","https://github.com/kubernetes/kubernetes/commit/d65039c56ce4de5f2efdc38aa1284eeb95f89169","https://github.com/kubernetes/kubernetes/issues/65750","https://github.com/kubernetes/kubernetes/pull/65751","https://security.netapp.com/advisory/ntap-20190416-0008"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GO-2022-0886","url":"https://osv.dev/vulnerability/GO-2022-0886"},{"source":"nvd","source_id":"CVE-2018-1002101","url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1002101"}],"summary":"Kubernetes Arbitrary Command Injection in k8s.io/kubernetes"}