id: GO-2025-3741
modules:
    - module: github.com/kro-run/kro
      versions:
        - fixed: 0.2.1
summary: kro Confused Deputy vulnerability in github.com/kro-run/kro
cves:
    - CVE-2025-48710
ghsas:
    - GHSA-7633-x85h-5mqh
references:
    - advisory: https://github.com/advisories/GHSA-7633-x85h-5mqh
    - advisory: https://nvd.nist.gov/vuln/detail/CVE-2025-48710
    - web: https://github.com/kro-run/kro/compare/v0.2.1...v0.2.2
    - web: https://orca.security/resources/blog/kubernetes-crd-abstraction-risks-kro
source:
    id: GHSA-7633-x85h-5mqh
    created: 2025-06-06T10:49:31.223453-04:00
review_status: UNREVIEWED