CLEANSTART-2026-KO57202 Security fix for CVE-2025-13281 applied in: argo-cd 3.1.12-r0, argo-rollouts 1.9.0-r0, argo-rollouts-fips 1.9.0-r0, calico-fips 3.28.5-r4, ip-masq-agent 2.12.6-r1, local-static-provisioner 2.8.0-r2

🗓️ 18 Sep 2026 10:28:28Reported by GoogleType

osv🔗 osv.dev👁 5 Views

CVE-2025-13281 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.

Reporter	Title	Published	Views	Family All 832
AlpineLinux	CVE-2025-13281	14 Dec 202521:27	–	alpinelinux
IBM Security Bulletins	Security Bulletin: ELM on Hybrid Cloud vulnerabilities addressed in 1.3.0	9 Mar 202613:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a Server Side Request Forgery (SSRF) vulnerability in kubernetes [CVE-2025-13281]	24 Aug 202622:16	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities for EDB Cloudpack for Data CP4D 5.3.1	1 Apr 202606:00	–	ibm
BDU FSTEC	The vulnerability of the Kubernetes cluster management software lies in insufficient validation of incoming requests, allowing a hacker to execute a SSRF attack.	25 Mar 202600:00	–	bdu_fstec
CBLMariner	CVE-2025-13281 affecting package kubernetes for versions less than 1.30.10-18	12 Jan 202621:27	–	cbl_mariner
CBLMariner	CVE-2025-13281 affecting package kubernetes for versions less than 1.28.4-21	7 Jan 202619:09	–	cbl_mariner
Chainguard	CVE-2025-13281 vulnerabilities	17 Dec 202513:23	–	cgr
Circl	CVE-2025-13281	1 Dec 202516:37	–	circl
CNNVD	Kubernetes 安全漏洞	14 Dec 202500:00	–	cnnvd

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-KO57202.json
osv	www.osv.dev/vulnerability/CVE-2025-13281
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-13281

18 Sep 2026 11:46Current

CVSS 3.15.8

EPSS0.00389

SSVC