CGA-rv23-m924-g58v

CVE-2025-1767 does not affect the Kubernetes client or the core Kubernetes platform. This vulnerability is specifically related to the deprecated gitRepo volume feature, which is no longer maintained and will not receive security updates. Importantly, the issue lies in the git-repo volume provisioner, not the Kubernetes client itself.

The k8s.io CVE affecting this package is currently in the triage stage upstream, PR on the issue can be found here: https://github.com/kubernetes/kubernetes/issues/130786