{"action":"Upgrade kora-lib to 2.0.5 or later.","affected":[{"fixed":"2.0.5","introduced":"0"}],"component":"kora-lib","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["2.0.5"],"ghsa_id":"GHSA-725g-w329-g7qr","id":"tcs_01M5KETXX7BM3F14W17B3HSYN3","modified_at":"2026-03-14T03:09:52.525491Z","published_at":"2026-03-12T14:50:43Z","references":["https://osv.dev/vulnerability/GHSA-725g-w329-g7qr","https://github.com/solana-foundation/kora/security/advisories/GHSA-725g-w329-g7qr","https://github.com/solana-foundation/kora/commit/8cbd8217ee505e6b37c63ef835ff095cfa8ab318","https://github.com/solana-foundation/kora"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-725g-w329-g7qr","url":"https://osv.dev/vulnerability/GHSA-725g-w329-g7qr"}],"summary":"kora-lib: Token-2022 Transfer Fee Not Deducted During Payment Verification"}