{"action":"Upgrade kubernetes to 1.20.5+really1.20.2-1 or later.","affected":[{"fixed":"1.20.5+really1.20.2-1","introduced":"0"}],"component":"kubernetes","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["1.20.5+really1.20.2-1"],"id":"tcs_01M5NGRSP30W3AM0GCWX58JFVM","modified_at":"2026-10-15T08:01:53.162819991Z","published_at":"2023-03-01T19:15:25.570Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2022-3294","https://security-tracker.debian.org/tracker/CVE-2022-3294"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2022-3294","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2022-3294"}],"summary":"Users may have access to secure endpoints in the control plane network. Kubernetes clusters are only affected if an untrusted user can modify Node objects and send proxy requests to them. Kubernetes s"}