{"action":"Upgrade k8s.io/kubernetes to 1.31.12 or later.","affected":[{"fixed":"1.31.12","introduced":"0"},{"fixed":"1.32.8","introduced":"1.32.0-alpha.0"},{"fixed":"1.33.4","introduced":"1.33.0-alpha.0"}],"component":"k8s.io/kubernetes","cve_ids":["CVE-2025-5187"],"ecosystem":"Go","epss":0.00574,"exploited":false,"fixed_versions":["1.31.12","1.32.8","1.33.4"],"ghsa_id":"GHSA-4x4m-3c2p-qppc","id":"tcs_01M5KGA3YBETY4MC3917RQ584W","modified_at":"2026-02-04T03:55:32.336755Z","published_at":"2025-09-18T17:26:15Z","references":["https://osv.dev/vulnerability/GO-2025-3915","https://github.com/advisories/GHSA-4x4m-3c2p-qppc","https://github.com/kubernetes/kubernetes/commit/a2d98cac56a0c5cb2d8abc4d087fc00846b3bc0f","https://github.com/kubernetes/kubernetes/issues/133471","https://groups.google.com/g/kubernetes-security-announce/c/znSNY7XCztE"],"severity":{"label":"medium","score":6.7},"sources":[{"source":"osv","source_id":"GO-2025-3915","url":"https://osv.dev/vulnerability/GO-2025-3915"},{"source":"nvd","source_id":"CVE-2025-5187","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-5187"}],"summary":"Kubernetes Nodes can delete themselves by adding an OwnerReference in k8s.io/kubernetes"}