{"action":"Upgrade k8s.io/kubernetes to 1.29.13 or later.","affected":[{"fixed":"1.29.13","introduced":"0"},{"fixed":"1.30.9","introduced":"1.30.0-alpha.0"},{"fixed":"1.31.5","introduced":"1.31.0-alpha.0"},{"fixed":"1.32.1","introduced":"1.32.0-alpha.0"}],"component":"k8s.io/kubernetes","cve_ids":["CVE-2024-9042"],"ecosystem":"Go","epss":0.01398,"exploited":false,"fixed_versions":["1.29.13","1.30.9","1.31.5","1.32.1"],"ghsa_id":"GHSA-vv39-3w5q-974q","id":"tcs_01M5KG7EHF47Y5WTRB4V4W3Z4N","modified_at":"2026-02-04T02:48:48.212884Z","published_at":"2025-03-25T19:38:11Z","references":["https://osv.dev/vulnerability/GO-2025-3522","https://github.com/advisories/GHSA-vv39-3w5q-974q","http://www.openwall.com/lists/oss-security/2025/01/16/1","https://github.com/kubernetes/kubernetes/commit/45f4ccc2153bbb782253704cbe24c05e22b5d60c","https://github.com/kubernetes/kubernetes/commit/5fe148234f8ab1184f26069c4f7bef6c37efe347","https://github.com/kubernetes/kubernetes/commit/75c83a6871dc030675288c6d63c275a43c2f0d55","https://github.com/kubernetes/kubernetes/commit/fb0187c2bf7061258bb89891edb1237261eb7abc","https://github.com/kubernetes/kubernetes/issues/129654","https://groups.google.com/g/kubernetes-security-announce/c/9C3vn6aCSVg"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GO-2025-3522","url":"https://osv.dev/vulnerability/GO-2025-3522"},{"source":"nvd","source_id":"CVE-2024-9042","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-9042"}],"summary":"Kubernetes allows Command Injection affecting Windows nodes via nodes/*/logs/query API in k8s.io/kubernetes"}