{"action":"Upgrade github.com/zxh326/kite to 0.14.1 or later.","affected":[{"fixed":"0.14.1","introduced":"0.6.9"}],"component":"github.com/zxh326/kite","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["0.14.1"],"ghsa_id":"GHSA-c534-2w9c-x7fm","id":"tcs_01M5KF6QG9GJ10H958MD3JCYXQ","modified_at":"2026-08-18T15:11:06.311754840Z","published_at":"2026-07-24T21:47:16Z","references":["https://osv.dev/vulnerability/GHSA-c534-2w9c-x7fm","https://github.com/kite-org/kite/security/advisories/GHSA-c534-2w9c-x7fm","https://github.com/kite-org/kite/pull/638","https://github.com/kite-org/kite/commit/08116eed557f8d6982cc83af0b02991e0f3577d5","https://github.com/kite-org/kite/commit/69ad938937af8f375a2e183d1a331926ab851d98","https://github.com/kite-org/kite","https://github.com/kite-org/kite/releases/tag/v0.14.1"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-c534-2w9c-x7fm","url":"https://osv.dev/vulnerability/GHSA-c534-2w9c-x7fm"}],"summary":"Kite Kubernetes proxy path traversal allows authenticated users to bypass RBAC and read cluster-wide resources"}