metrics-server v0.8.1 affected by critical CVE-2025-68121

[boazchum]

Vulnerability details are here https://nvd.nist.gov/vuln/detail/cve-2025-68121. This has been escalated to critical severity in recent weeks.

v0.8.1 is on go version 1.24.12.

[k8s-ci-robot]

This issue is currently awaiting triage.

If metrics-server contributors determine this is a relevant issue, they will accept it by applying the triage/accepted label and provide further guidance.

The triage/accepted label can be added by org members by writing /triage accepted in a comment.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[yangjunmyfm192085]

/assign

[slashpai]

#1739
A new release is scheduled for the week/next week which should fix