{"action":"Upgrade k8s.io/kubernetes to 1.21.0 or later.","affected":[{"fixed":"1.21.0","introduced":"0"}],"component":"k8s.io/kubernetes","cve_ids":["CVE-2021-25736"],"ecosystem":"Go","epss":0.00915,"exploited":false,"fixed_versions":["1.21.0"],"ghsa_id":"GHSA-35c7-w35f-xwgh","id":"tcs_01M5KG0GYM535A5D31EF6NWWH1","modified_at":"2026-02-04T03:26:10.362Z","published_at":"2024-08-21T14:30:22Z","references":["https://osv.dev/vulnerability/GO-2023-2159","https://github.com/advisories/GHSA-35c7-w35f-xwgh","https://github.com/kubernetes/kubernetes/commit/b014610de3e5cf1bb0f7844b5758d29fc18b75e6","https://github.com/kubernetes/kubernetes/pull/99958","https://groups.google.com/g/kubernetes-security-announce/c/lIoOPObO51Q/m/O15LOazPAgAJ"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2023-2159","url":"https://osv.dev/vulnerability/GO-2023-2159"}],"summary":"Kube-proxy may unintentionally forward traffic in k8s.io/kubernetes"}