Merge pull request #2278 from andyzhangx/CVE-2025-13281-1.27

[release-1.27] fix: CVE-2025-13281

Author: andyzhangx

go.mod

@@ -37,7 +37,7 @@ require (
 	k8s.io/client-go v0.33.4
 	k8s.io/component-base v0.33.4
 	k8s.io/klog/v2 v2.130.1
-	k8s.io/kubernetes v1.33.4
+	k8s.io/kubernetes v1.33.7
 	k8s.io/mount-utils v0.34.0
 	k8s.io/pod-security-admission v0.31.1
 	k8s.io/utils v0.0.0-20250604170112-4c0f3b243397
@@ -215,7 +215,6 @@ replace (
 	k8s.io/kube-scheduler => k8s.io/kube-scheduler v0.33.4
 	k8s.io/kubectl => k8s.io/kubectl v0.33.4
 	k8s.io/kubelet => k8s.io/kubelet v0.33.4
-	k8s.io/kubernetes => k8s.io/kubernetes v1.33.4
 	k8s.io/legacy-cloud-providers => k8s.io/legacy-cloud-providers v0.33.4
 	k8s.io/metrics => k8s.io/metrics v0.33.4
 	k8s.io/pod-security-admission => k8s.io/pod-security-admission v0.33.4

go.sum

@@ -473,8 +473,8 @@ k8s.io/kubectl v0.33.4 h1:nXEI6Vi+oB9hXxoAHyHisXolm/l1qutK3oZQMak4N98=
 k8s.io/kubectl v0.33.4/go.mod h1:Xe7P9X4DfILvKmlBsVqUtzktkI56lEj22SJW7cFy6nE=
 k8s.io/kubelet v0.33.4 h1:+sbpLmSq+Y8DF/OQeyw75OpuiF60tvlYcmc/yjN+nl4=
 k8s.io/kubelet v0.33.4/go.mod h1:wboarviFRQld5rzZUjTliv7x00YVx+YhRd/p1OahX7Y=
-k8s.io/kubernetes v1.33.4 h1:T1d5FLUYm3/KyUeV7YJhKTR980zHCHb7K2xhCSo3lE8=
-k8s.io/kubernetes v1.33.4/go.mod h1:nrt8sldmckKz2fCZhgRX3SKfS2e+CzXATPv6ITNkU00=
+k8s.io/kubernetes v1.33.7 h1:Qhp1gwCPSOqt3du6A0uTGrrTcZDtShdSCIR5IZag16Y=
+k8s.io/kubernetes v1.33.7/go.mod h1:eJiHC143tnNSvmDkCRwGNKA80yXqBvYC3U8L/i67nAY=
 k8s.io/mount-utils v0.34.0 h1:f2QzKU8ZLz5cJ/TmRRZnfAVJ8EPsF+FT1I6pP/HA4gk=
 k8s.io/mount-utils v0.34.0/go.mod h1:MIjjYlqJ0ziYQg0MO09kc9S96GIcMkhF/ay9MncF0GA=
 k8s.io/pod-security-admission v0.33.4 h1:adSwY7a/Q4Eoj+uCUfav90xRe6mB8waF0HAZ4gZeWD0=