CGA-rxx2-gfpp-6732

The reported issue is a race in the API server control plane, where network policies can be removed before the pods they protect during namespace termination; the upstream advisory scopes it to the API server command and states that no fixed version exists. Only Kubernetes API type and scheme registration packages are compiled in here, and none of the server-side namespace deletion, registry or controller packages are linked into any shipped binary, so the vulnerable code path is not present and cannot execute. The vendored module version additionally already carries the upstream ordered-namespace-deletion mitigation, which is generally available and locked on by default from 1.34 onward.