Skip to content
OpenAdvisories

Package · Go

github.com/kro-run/kro

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 4.1
    CVE-2025-48710

    kro Confused Deputy vulnerability

    kro (Kube Resource Orchestrator) 0.1.0 before 0.2.1 allows users (with permission to create or modify ResourceGraphDefinition resources) to supply arbitrary container images. This can lead to a confused-deputy scenario where kro's controllers deploy and run a…

    kro.run kro github.com/kro-run/kro Go