A security issue was discovered in Kubernetes that could allow  Windows workloads to run as `ContainerAdministrator` even when those workloads set the `runAsNonRoot` option to `true `.

This issue has been rated low and assigned CVE-2021-25749

### Am I vulnerable?

All Kubernetes clusters with following versions, running Windows workloads with `runAsNonRoot` are impacted

#### Affected Versions

- kubelet v1.20 - v1.21

{return U(this.days()/7)},Xt.months=Gt,Xt.years=Vt,Xt.humanize=function(e,a){if(!this.isValid())return this.localeData().invalidDate();var t,s,n=!1,r=Kt;return"object"==typeof e&&(a=e,e=!1),"boolean"==typeof e&&(n=e),"object"==typeof a&&(r=Object.assign({},Kt,a),null!=a.s&&null==a.ss&&(r.ss=a.s-1)),t=this.localeData(),s=qt(this,!n,r,t),n&&(s=t.pastFuture(+this,s)),t.postformat(s)},Xt.toISOString=Qt,Xt.toString=Qt,Xt.toJSON=Qt,Xt.locale=at,Xt.localeData=st,Xt.toIsoString=t("toIsoString() is deprecated....

  much later). ([#122757](https://github.com/kubernetes/kubernetes/pull/122757), [@hakman](https://github.com/hakman)) [SIG Network]
- If a pvc has an empty storageClassName, persistentvolume controller won't try to assign a default StorageClass ([#122704](https://github.com/kubernetes/kubernetes/pull/122704), [@carlory](https://github.com/carlory)) [SIG Apps and Storage]

pkg go/ast, type TypeSpec struct, Doc *CommentGroup
pkg go/ast, type TypeSpec struct, Name *Ident
pkg go/ast, type TypeSpec struct, Type Expr
pkg go/ast, type TypeSwitchStmt struct
pkg go/ast, type TypeSwitchStmt struct, Assign Stmt
pkg go/ast, type TypeSwitchStmt struct, Body *BlockStmt
pkg go/ast, type TypeSwitchStmt struct, Init Stmt
pkg go/ast, type TypeSwitchStmt struct, Switch token.Pos
pkg go/ast, type UnaryExpr struct

this Agreement from time to time. No one other than the Agreement
Steward has the right to modify this Agreement. The Eclipse Foundation
is the initial Agreement Steward. The Eclipse Foundation may assign the
responsibility to serve as the Agreement Steward to a suitable separate
entity. Each new version of the Agreement will be given a distinguishing
version number. The Program (including Contributions) may always be

pkg go/token, const AND = 17
pkg go/token, const AND_ASSIGN = 28
pkg go/token, const AND_NOT = 22
pkg go/token, const AND_NOT_ASSIGN = 33
pkg go/token, const ARROW = 36
pkg go/token, const ASSIGN = 42
pkg go/token, const BREAK = 61
pkg go/token, const CASE = 62
pkg go/token, const CHAN = 63
pkg go/token, const CHAR = 8
pkg go/token, const COLON = 58
pkg go/token, const COMMA = 52