{"action":"Upgrade k8s.io/kubernetes to 1.7.14 or later.","affected":[{"fixed":"1.7.14","introduced":"1.3.0"},{"fixed":"1.8.9","introduced":"1.8.0"},{"fixed":"1.9.4","introduced":"1.9.0"}],"component":"k8s.io/kubernetes","cve_ids":["CVE-2017-1002102"],"ecosystem":"Go","epss":0.01101,"exploited":false,"fixed_versions":["1.7.14","1.8.9","1.9.4"],"ghsa_id":"GHSA-mm7g-f2gg-cw8g","id":"tcs_01M5KFZVP3E4E72N0XX1BM2QDZ","modified_at":"2026-03-03T04:54:05.433393Z","published_at":"2024-08-20T20:32:20Z","references":["https://osv.dev/vulnerability/GO-2023-1977","https://github.com/advisories/GHSA-mm7g-f2gg-cw8g","https://access.redhat.com/errata/RHSA-2018:0475","https://github.com/kubernetes/kubernetes/issues/60814"],"severity":{"label":"medium","score":5.6},"sources":[{"source":"osv","source_id":"GO-2023-1977","url":"https://osv.dev/vulnerability/GO-2023-1977"},{"source":"nvd","source_id":"CVE-2017-1002102","url":"https://nvd.nist.gov/vuln/detail/CVE-2017-1002102"}],"summary":"Kubernetes can trigger deletion of arbitrary files from the nodes where containers are running in k8s.io/kubernetes"}