OESA-2025-2280 kubernetes security update

🗓️ 12 Sep 2025 14:26:11Reported by GoogleType

osv🔗 osv.dev👁 2 Views

Kubernetes security update fixes NodeRestriction flaw that lets node users delete nodes via patch.

Reporter	Title	Published	Views	Family All 143
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by a Kubernetes API server security vulnerability (CVE-2025-5187)	29 Sep 202511:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	10 Nov 202508:26	–	ibm
IBM Security Bulletins	Security Bulletin: Astronomer with IBM is vulnerable to object abuse due to Kubernetes (CVE-2025-5187)	28 Nov 202519:09	–	ibm
IBM Security Bulletins	Security Bulletin: ELM on Hybrid Cloud vulnerabilities addressed in 1.3.0	9 Mar 202613:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses k8s.io/kubernetes v1.33.1 which is vulnerable to CVE-2025-4563 and CVE-2025-5187	3 Feb 202610:39	–	ibm
Chainguard	CVE-2025-5187 vulnerabilities	29 Aug 202514:16	–	cgr
Circl	CVE-2025-5187	14 Aug 202501:07	–	circl
CNNVD	Kubernetes 安全漏洞	27 Aug 202500:00	–	cnnvd
CVE	CVE-2025-5187	27 Aug 202516:20	–	cve
Cvelist	CVE-2025-5187 Nodes can delete themselves by adding an OwnerReference	27 Aug 202516:20	–	cvelist