{"action":"Upgrade github.com/kerberos-io/agent/machinery to 0.0.0-20260528173546-51f1a52e170f or later.","affected":[{"introduced":"0"}],"component":"github.com/kerberos-io/agent/machinery","cve_ids":["CVE-2026-50192"],"ecosystem":"Go","epss":0.00421,"exploited":false,"fixed_versions":["0.0.0-20260528173546-51f1a52e170f"],"ghsa_id":"GHSA-h5gx-45rj-2h5j","id":"tcs_01M5KFBYR11DKQMBN4BT6ZN6B7","modified_at":"2026-07-07T16:11:23.177324560Z","published_at":"2026-07-02T17:33:36Z","references":["https://osv.dev/vulnerability/GHSA-h5gx-45rj-2h5j","https://github.com/kerberos-io/agent/security/advisories/GHSA-h5gx-45rj-2h5j","https://github.com/kerberos-io/agent/commit/51f1a52e170f21c1264c6de1dc781d5b5e2a5d09","https://github.com/kerberos-io/agent"],"severity":{"label":"medium","score":6.9},"sources":[{"source":"osv","source_id":"GHSA-h5gx-45rj-2h5j","url":"https://osv.dev/vulnerability/GHSA-h5gx-45rj-2h5j"},{"source":"nvd","source_id":"CVE-2026-50192","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50192"}],"summary":"Kerberos Hub private key (X-Kerberos-Hub-PrivateKey) leaked to cross-host redirect target due to redirect-following HTTP client without CheckRedirect"}