{"id":"GO-2026-5471","revision":"1fc73301af1a4883ad175e4ac3e414b4","records":[{"revision":"1fc73301af1a4883ad175e4ac3e414b4","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-5471","aliases":["CVE-2026-6993","GHSA-jj45-xvq5-rhh9"],"title":"Kratos has a Confused Deputy issue in github.com/go-kratos/kratos","description":"Kratos has a Confused Deputy issue in github.com/go-kratos/kratos","state":0,"publishedAt":"2026-07-24T18:35:55+00:00","modifiedAt":"2026-07-24T19:00:22.9137945+00:00","affected":[{"ecosystem":"Go","name":"github.com/go-kratos/kratos/v2","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/advisories/GHSA-jj45-xvq5-rhh9","https://github.com/go-kratos/kratos/pull/3814","https://github.com/go-kratos/kratos/issues/3810"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-5471","license":"OSV · upstream source license applies","key":"osv:GO-2026-5471","identifiers":["GO-2026-5471","CVE-2026-6993","GHSA-jj45-xvq5-rhh9"]},"retained":false,"historicalAffected":[]}],"coverage":[]}