{"action":"Upgrade github.com/zxh326/kite to 0.12.3 or later.","affected":[{"fixed":"0.12.3","introduced":"0"}],"component":"github.com/zxh326/kite","cve_ids":["CVE-2026-53487"],"ecosystem":"Go","epss":0.0027,"exploited":false,"fixed_versions":["0.12.3"],"ghsa_id":"GHSA-gvhc-wv3v-7pf8","id":"tcs_01M5KGQWEN53H81PE24WMPHJJN","modified_at":"2026-07-21T19:15:29.197404171Z","published_at":"2026-07-17T19:42:05Z","references":["https://osv.dev/vulnerability/GO-2026-5941","https://github.com/kite-org/kite/security/advisories/GHSA-gvhc-wv3v-7pf8"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2026-5941","url":"https://osv.dev/vulnerability/GO-2026-5941"}],"summary":"Kite has an authenticated cluster RBAC bypass in /api/v1/overview in github.com/zxh326/kite"}