{"action":"Upgrade github.com/zxh326/kite to 0.14.1 or later.","affected":[{"fixed":"0.14.1","introduced":"0.6.9"}],"component":"github.com/zxh326/kite","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["0.14.1"],"ghsa_id":"GHSA-c534-2w9c-x7fm","id":"tcs_01M5KGRVYGA1ZTC843MKB7NS3A","modified_at":"2026-08-18T15:00:16.100283578Z","published_at":"2026-08-18T14:32:29Z","references":["https://osv.dev/vulnerability/GO-2026-6105","https://github.com/kite-org/kite/security/advisories/GHSA-c534-2w9c-x7fm","https://github.com/kite-org/kite/commit/08116eed557f8d6982cc83af0b02991e0f3577d5","https://github.com/kite-org/kite/commit/69ad938937af8f375a2e183d1a331926ab851d98","https://github.com/kite-org/kite/pull/638","https://github.com/kite-org/kite/releases/tag/v0.14.1"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2026-6105","url":"https://osv.dev/vulnerability/GO-2026-6105"}],"summary":"Kite Kubernetes proxy path traversal allows authenticated users to bypass RBAC and read cluster-wide resources in github.com/zxh326/kite"}