Merge pull request #2279 from andyzhangx/CVE-2025-13281-1.26

[release-1.26] fix: CVE-2025-13281

Author: andyzhangx

go.mod

@@ -37,7 +37,7 @@ require (
 	k8s.io/client-go v0.32.8
 	k8s.io/component-base v0.32.8
 	k8s.io/klog/v2 v2.130.1
-	k8s.io/kubernetes v1.32.8
+	k8s.io/kubernetes v1.32.10
 	k8s.io/mount-utils v0.32.8
 	k8s.io/pod-security-admission v0.31.1
 	k8s.io/utils v0.0.0-20250502105355-0f33e8f1c979
@@ -222,7 +222,6 @@ replace (
 	k8s.io/kube-scheduler => k8s.io/kube-scheduler v0.32.8
 	k8s.io/kubectl => k8s.io/kubectl v0.32.8
 	k8s.io/kubelet => k8s.io/kubelet v0.32.8
-	k8s.io/kubernetes => k8s.io/kubernetes v1.32.8
 	k8s.io/legacy-cloud-providers => k8s.io/legacy-cloud-providers v0.32.8
 	k8s.io/metrics => k8s.io/metrics v0.32.8
 	k8s.io/pod-security-admission => k8s.io/pod-security-admission v0.32.8

go.sum

@@ -513,8 +513,8 @@ k8s.io/kubectl v0.32.8 h1:X6I2Rmd+RZvtu+BRplREUTkIYgUc87s87m/kZsbKC7s=
 k8s.io/kubectl v0.32.8/go.mod h1:RbwOkKZdxIFzhFIxXY3on/n6aaSXCc353iJ0IXb4DvU=
 k8s.io/kubelet v0.32.8 h1:9N4DRmcNFBNnS62Nf8If7wiCtkaSrR7tTsXPe0DC0aI=
 k8s.io/kubelet v0.32.8/go.mod h1:8cRHXzRmXftGJrvR3e32jGiqStzVrK6hPgoQqdjvEAE=
-k8s.io/kubernetes v1.32.8 h1:NePHsWPIT9NQZ9w5QT/chJMuwjFFGGZxalvD6FlOjlw=
-k8s.io/kubernetes v1.32.8/go.mod h1:REY0Gok66BTTrbGyZaFMNKO9JhxvgBDW9B7aksWRFoY=
+k8s.io/kubernetes v1.32.10 h1:yiRa8DyKp4Yrbv028MP6kpp5N1N3eO8Hp/tSCbBGIPE=
+k8s.io/kubernetes v1.32.10/go.mod h1:o2pRStsMR7Uq62zcugfUEQsxnuyFt9r8migMrbsVH00=
 k8s.io/mount-utils v0.32.8 h1:xe/0LiH2URGPM4dTyhvivRdUiUfyssPeUODRekw3Pxg=
 k8s.io/mount-utils v0.32.8/go.mod h1:Kun5c2svjAPx0nnvJKYQWhfeNW+O0EpzHgRhDcYoSY0=
 k8s.io/pod-security-admission v0.32.8 h1:nSyjXGZWq9CWr4ehXxNTIlC6I8P0f9aIqcz+9DCFw1Y=

vendor/k8s.io/kubernetes/pkg/securitycontext/util.go

@@ -1709,7 +1709,7 @@ k8s.io/kubelet/pkg/apis/pluginregistration/v1
 k8s.io/kubelet/pkg/apis/podresources/v1
 k8s.io/kubelet/pkg/apis/podresources/v1alpha1
 k8s.io/kubelet/pkg/apis/stats/v1alpha1
-# k8s.io/kubernetes v1.32.8 => k8s.io/kubernetes v1.32.8
+# k8s.io/kubernetes v1.32.10
 ## explicit; go 1.23.0
 k8s.io/kubernetes/pkg/api/legacyscheme
 k8s.io/kubernetes/pkg/api/service
@@ -2070,7 +2070,6 @@ sigs.k8s.io/yaml/goyaml.v2
 # k8s.io/kube-scheduler => k8s.io/kube-scheduler v0.32.8
 # k8s.io/kubectl => k8s.io/kubectl v0.32.8
 # k8s.io/kubelet => k8s.io/kubelet v0.32.8
-# k8s.io/kubernetes => k8s.io/kubernetes v1.32.8
 # k8s.io/legacy-cloud-providers => k8s.io/legacy-cloud-providers v0.32.8
 # k8s.io/metrics => k8s.io/metrics v0.32.8
 # k8s.io/pod-security-admission => k8s.io/pod-security-admission v0.32.8