{"action":"Upgrade k8s.io/kubernetes to 1.18.18 or later.","affected":[{"fixed":"1.18.18","introduced":"0"},{"fixed":"1.19.10","introduced":"1.19.0"},{"fixed":"1.20.6","introduced":"1.20.0"}],"component":"k8s.io/kubernetes","cve_ids":["CVE-2021-25735"],"ecosystem":"Go","epss":0.05375,"exploited":false,"fixed_versions":["1.18.18","1.19.10","1.20.6"],"ghsa_id":"GHSA-g42g-737j-qx6j","id":"tcs_01M5KFX91P9H618YBQZ94Q6VE6","modified_at":"2026-02-04T03:59:40.340851Z","published_at":"2024-08-21T15:29:08Z","references":["https://osv.dev/vulnerability/GO-2022-0907","https://github.com/advisories/GHSA-g42g-737j-qx6j","https://bugzilla.redhat.com/show_bug.cgi?id=1937562","https://github.com/kubernetes/kubernetes/commit/00e81db174ef7aca497be5f42d87e46d14df2a90","https://github.com/kubernetes/kubernetes/issues/100096","https://github.com/kubernetes/kubernetes/pull/99946","https://groups.google.com/g/kubernetes-security-announce/c/FKAGqT4jx9Y","https://pkg.go.dev/k8s.io/kubernetes@v1.23.5/cmd/kube-apiserver","https://sysdig.com/blog/cve-2021-25735-kubernetes-admission-bypass"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2022-0907","url":"https://osv.dev/vulnerability/GO-2022-0907"}],"summary":"Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes"}