{"action":"Upgrade KubernetesClient to 17.0.14 or later.","affected":[{"fixed":"17.0.14","introduced":"0"}],"component":"KubernetesClient","cve_ids":["CVE-2025-9708"],"ecosystem":"NuGet","epss":0.00308,"exploited":false,"fixed_versions":["17.0.14"],"ghsa_id":"GHSA-w7r3-mgwf-4mqq","id":"tcs_01M5N93ACM8N23JYA2NV4M6WA2","modified_at":"2026-09-10T03:50:29.850734646Z","published_at":"2025-09-17T00:31:11Z","references":["https://osv.dev/vulnerability/GHSA-w7r3-mgwf-4mqq","https://nvd.nist.gov/vuln/detail/CVE-2025-9708","https://github.com/kubernetes/kubernetes/issues/134063","https://github.com/kubernetes-client/csharp","https://groups.google.com/g/kubernetes-security-announce/c/rLopt2Msvbw/m/rK6XeNw2CgAJ","http://www.openwall.com/lists/oss-security/2025/09/16/1"],"severity":{"label":"medium","score":6.8},"sources":[{"source":"osv","source_id":"GHSA-w7r3-mgwf-4mqq","url":"https://osv.dev/vulnerability/GHSA-w7r3-mgwf-4mqq"}],"summary":"Kubernetes C# client accepts certificates from any CA without properly verifying the trust chain"}