CVE-2025-48710
2 advisories.
Go/github.com/kro-run/kro CVE-2025-48710: medium 4.1
kro Confused Deputy vulnerability
Action: Upgrade github.com/kro-run/kro to 0.2.1 or later.
go get github.com/kro-run/kro@v0.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.1.0 | 0.2.1 | - |
Fixed versions
| 0.2.1 |
Sources
- osv: GHSA-7633-x85h-5mqh
- https://nvd.nist.gov/vuln/detail/CVE-2025-48710
- https://github.com/kro-run/kro
- https://github.com/kro-run/kro/compare/v0.2.1...v0.2.2
- https://orca.security/resources/blog/kubernetes-crd-abstraction-risks-kro
CVE-2025-48710 · published · modified · JSON
Go/github.com/kro-run/kro CVE-2025-48710: unknown
kro Confused Deputy vulnerability in github.com/kro-run/kro
Action: Upgrade github.com/kro-run/kro to 0.2.1 or later.
go get github.com/kro-run/kro@v0.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.2.1 | - |
Fixed versions
| 0.2.1 |
Sources
- osv: GO-2025-3741
- https://github.com/advisories/GHSA-7633-x85h-5mqh
- https://nvd.nist.gov/vuln/detail/CVE-2025-48710
- https://github.com/kro-run/kro/compare/v0.2.1...v0.2.2
- https://orca.security/resources/blog/kubernetes-crd-abstraction-risks-kro
CVE-2025-48710 · published · modified · JSON