{"action":"Upgrade github.com/karmada-io/dashboard to 0.2.0 or later.","affected":[{"fixed":"0.2.0","introduced":"0"}],"component":"github.com/karmada-io/dashboard","cve_ids":["CVE-2025-62714"],"ecosystem":"Go","epss":0.00494,"exploited":false,"fixed_versions":["0.2.0"],"ghsa_id":"GHSA-5qjg-9mjh-4r92","id":"tcs_01M5KEYPEJ4EBKSYG2HH3QHH72","modified_at":"2026-07-06T15:15:12.480738153Z","published_at":"2025-10-24T15:27:04Z","references":["https://osv.dev/vulnerability/GHSA-5qjg-9mjh-4r92","https://github.com/karmada-io/dashboard/security/advisories/GHSA-5qjg-9mjh-4r92","https://github.com/karmada-io/dashboard/pull/271","https://github.com/karmada-io/dashboard/pull/280","https://github.com/karmada-io/dashboard/commit/8457b8bb87725e2371a638ca5a255fd2895c70f1","https://github.com/karmada-io/dashboard/commit/d2d04909f25e96b4c20fa6b636c398bd1636ee06","https://github.com/karmada-io/dashboard","https://github.com/karmada-io/dashboard/releases/tag/v0.2.0"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-5qjg-9mjh-4r92","url":"https://osv.dev/vulnerability/GHSA-5qjg-9mjh-4r92"}],"summary":"Karmada Dashboard API Unauthorized Access Vulnerability"}