{"action":"Upgrade sigs.k8s.io/secrets-store-sync-controller to 0.0.2 or later.","affected":[{"fixed":"0.0.2","introduced":"0"}],"component":"sigs.k8s.io/secrets-store-sync-controller","cve_ids":["CVE-2025-7445"],"ecosystem":"Go","epss":0.00195,"exploited":false,"fixed_versions":["0.0.2"],"ghsa_id":"GHSA-rcw7-pqfp-735x","id":"tcs_01M5KFMHZXT79CM2WCKWB78V1Z","modified_at":"2025-09-17T17:27:05.731550Z","published_at":"2025-09-05T21:02:44Z","references":["https://osv.dev/vulnerability/GHSA-rcw7-pqfp-735x","https://github.com/kubernetes-sigs/secrets-store-sync-controller/security/advisories/GHSA-rcw7-pqfp-735x","https://nvd.nist.gov/vuln/detail/CVE-2025-7445","https://github.com/kubernetes/kubernetes/issues/133897","https://github.com/kubernetes-sigs/secrets-store-sync-controller","https://groups.google.com/g/kubernetes-security-announce/c/NP7cQvQ1aGA"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-rcw7-pqfp-735x","url":"https://osv.dev/vulnerability/GHSA-rcw7-pqfp-735x"}],"summary":"secrets-store-sync-controller discloses service account tokens in logs"}