{"action":"Upgrade k8s.io/kubernetes to 1.12.5 or later.","affected":[{"fixed":"1.12.5","introduced":"1.12.0"},{"fixed":"1.13.1","introduced":"1.13.0"}],"component":"k8s.io/kubernetes","cve_ids":["CVE-2019-11243"],"ecosystem":"Go","epss":0.01492,"exploited":false,"fixed_versions":["1.12.5","1.13.1"],"ghsa_id":"GHSA-gc2p-g4fg-29vh","id":"tcs_01M5KG8BEFFFNWGQ8FT0N47PXR","modified_at":"2026-03-03T04:56:32.808074Z","published_at":"2025-05-05T16:13:00Z","references":["https://osv.dev/vulnerability/GO-2025-3645","https://github.com/advisories/GHSA-gc2p-g4fg-29vh","https://github.com/kubernetes/kubernetes/issues/76797","https://security.netapp.com/advisory/ntap-20190509-0002"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2025-3645","url":"https://osv.dev/vulnerability/GO-2025-3645"}],"summary":"Kubernetes did not effectively clear service account credentials in k8s.io/kubernetes"}