{"schema_version":"1.7.3","id":"GO-2025-3939","published":"2025-09-17T17:03:49Z","modified":"2026-03-03T04:57:27.686592Z","aliases":["CVE-2025-7445","GHSA-rcw7-pqfp-735x"],"summary":"secrets-store-sync-controller discloses service account tokens in logs in sigs.k8s.io/secrets-store-sync-controller","details":"secrets-store-sync-controller discloses service account tokens in logs in sigs.k8s.io/secrets-store-sync-controller","affected":[{"package":{"name":"sigs.k8s.io/secrets-store-sync-controller","ecosystem":"Go","purl":"pkg:golang/sigs.k8s.io/secrets-store-sync-controller"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.0.2"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://vuln.go.dev/ID/GO-2025-3939.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/kubernetes-sigs/secrets-store-sync-controller/security/advisories/GHSA-rcw7-pqfp-735x"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-7445"},{"type":"WEB","url":"https://github.com/kubernetes/kubernetes/issues/133897"},{"type":"WEB","url":"https://groups.google.com/g/kubernetes-security-announce/c/NP7cQvQ1aGA"}],"database_specific":{"review_status":"UNREVIEWED","url":"https://pkg.go.dev/vuln/GO-2025-3939"}}