CVE-2019-10223

score

<0.1

cvss

6.5

epss

1.8%

published

2019-11-05

kev added

—

first seen

2026-10-21

kube-state-metrics versions v1.7.0 and v1.7.1 contain a security issue caused by an experimental feature that exposes secret annotations as metrics, potentially leading to secret content disclosure, exploit requires default kubectl behavior and exposure of secrets.