{"action":"Upgrade github.com/zxh326/kite to 0.12.3 or later.","affected":[{"fixed":"0.12.3","introduced":"0"}],"component":"github.com/zxh326/kite","cve_ids":["CVE-2026-53487"],"ecosystem":"Go","epss":0.0027,"exploited":false,"fixed_versions":["0.12.3"],"ghsa_id":"GHSA-gvhc-wv3v-7pf8","id":"tcs_01M5KFBFC78V5AFPT65HK8T5CQ","modified_at":"2026-07-21T19:19:24.190769605Z","published_at":"2026-07-07T23:40:35Z","references":["https://osv.dev/vulnerability/GHSA-gvhc-wv3v-7pf8","https://github.com/kite-org/kite/security/advisories/GHSA-gvhc-wv3v-7pf8","https://github.com/kite-org/kite"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-gvhc-wv3v-7pf8","url":"https://osv.dev/vulnerability/GHSA-gvhc-wv3v-7pf8"}],"summary":"Kite has an authenticated cluster RBAC bypass in /api/v1/overview"}