{"action":"Upgrade k8s.io/kubernetes to 1.24.15 or later.","affected":[{"fixed":"1.24.15","introduced":"0"},{"fixed":"1.25.11","introduced":"1.25.0"},{"fixed":"1.26.6","introduced":"1.26.0"},{"fixed":"1.27.3","introduced":"1.27.0"}],"component":"k8s.io/kubernetes","cve_ids":["CVE-2023-2728"],"ecosystem":"Go","epss":0.02157,"exploited":false,"fixed_versions":["1.24.15","1.25.11","1.26.6","1.27.3"],"ghsa_id":"GHSA-cgcv-5272-97pr","id":"tcs_01M5KFZHWAVW3NT0EBN66HG2B1","modified_at":"2026-02-04T02:24:08.126010Z","published_at":"2024-08-20T20:31:35Z","references":["https://osv.dev/vulnerability/GO-2023-1892","https://github.com/advisories/GHSA-cgcv-5272-97pr","http://www.openwall.com/lists/oss-security/2023/07/06/3","https://github.com/kubernetes/kubernetes/issues/118640","https://github.com/kubernetes/kubernetes/pull/118356","https://github.com/kubernetes/kubernetes/pull/118471","https://github.com/kubernetes/kubernetes/pull/118473","https://github.com/kubernetes/kubernetes/pull/118474","https://github.com/kubernetes/kubernetes/pull/118512","https://groups.google.com/g/kubernetes-security-announce/c/vPWYJ_L84m8"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2023-1892","url":"https://osv.dev/vulnerability/GO-2023-1892"}],"summary":"Kubernetes mountable secrets policy bypass in k8s.io/kubernetes"}