x/vulndb: potential Go vuln in k8s.io/kubernetes/cmd/kubelet: GHSA-r76g-g87f-vw8f

[GoVulnBot]

In GitHub Security Advisory GHSA-r76g-g87f-vw8f, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
k8s.io/kubernetes/cmd/kubelet	1.13.7	>= 1.13.0, < 1.13.7

Cross references:
No existing reports found with this module or alias.

See doc/triage.md for instructions on how to triage this report.

modules:
    - module: k8s.io/kubernetes/cmd/kubelet
      versions:
        - introduced: 1.13.0
          fixed: 1.13.7
      packages:
        - package: k8s.io/kubernetes/cmd/kubelet
    - module: k8s.io/kubernetes/cmd/kubelet
      versions:
        - introduced: 1.14.0
          fixed: 1.14.3
      packages:
        - package: k8s.io/kubernetes/cmd/kubelet
summary: Kubelet Incorrect Privilege Assignment in k8s.io/kubernetes/cmd/kubelet
cves:
    - CVE-2019-11245
ghsas:
    - GHSA-r76g-g87f-vw8f
references:
    - web: https://nvd.nist.gov/vuln/detail/CVE-2019-11245
    - report: https://github.com/kubernetes/kubernetes/issues/78308
    - fix: https://github.com/kubernetes/kubernetes/pull/76665
    - fix: https://github.com/kubernetes/kubernetes/pull/76665/commits/26e3c8674e66f0d10170d34f5445f0aed207387f
    - web: https://bugzilla.redhat.com/show_bug.cgi?id=1715726
    - web: https://security.netapp.com/advisory/ntap-20190919-0003
    - advisory: https://github.com/advisories/GHSA-r76g-g87f-vw8f
source:
    id: GHSA-r76g-g87f-vw8f

[gopherbot]

Change https://go.dev/cl/591202 mentions this issue: data/reports: add 9 unreviewed reports