{"schema_version":"1.3.1","id":"GO-2022-0907","modified":"2025-08-05T19:57:40Z","published":"2024-08-21T15:29:08Z","aliases":["CVE-2021-25735","GHSA-g42g-737j-qx6j"],"summary":"Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes","details":"Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes","affected":[{"package":{"name":"k8s.io/kubernetes","ecosystem":"Go"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.18.18"},{"introduced":"1.19.0"},{"fixed":"1.19.10"},{"introduced":"1.20.0"},{"fixed":"1.20.6"}]}],"ecosystem_specific":{}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-g42g-737j-qx6j"},{"type":"WEB","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1937562"},{"type":"WEB","url":"https://github.com/kubernetes/kubernetes/commit/00e81db174ef7aca497be5f42d87e46d14df2a90"},{"type":"WEB","url":"https://github.com/kubernetes/kubernetes/issues/100096"},{"type":"WEB","url":"https://github.com/kubernetes/kubernetes/pull/99946"},{"type":"WEB","url":"https://groups.google.com/g/kubernetes-security-announce/c/FKAGqT4jx9Y"},{"type":"WEB","url":"https://pkg.go.dev/k8s.io/kubernetes@v1.23.5/cmd/kube-apiserver"},{"type":"WEB","url":"https://sysdig.com/blog/cve-2021-25735-kubernetes-admission-bypass"}],"database_specific":{"url":"https://pkg.go.dev/vuln/GO-2022-0907","review_status":"REVIEWED"}}