Количество 2
Количество 2
CVE-2026-49823
Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.24.0, a Fission Function spec carries three reference types — Secret, ConfigMap, and Package. The first two were namespace-validated by the admission webhook; PackageRef.Namespace was not. This issue has been patched in version 1.24.0.
GHSA-3r8v-2xmj-5c39
Fission: Cross-namespace Package read via unvalidated PackageRef in Function admission webhook
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2026-49823 Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.24.0, a Fission Function spec carries three reference types — Secret, ConfigMap, and Package. The first two were namespace-validated by the admission webhook; PackageRef.Namespace was not. This issue has been patched in version 1.24.0. | CVSS3: 7.7 | 0% Низкий | 3 месяца назад | |
GHSA-3r8v-2xmj-5c39 Fission: Cross-namespace Package read via unvalidated PackageRef in Function admission webhook | CVSS3: 7.7 | 0% Низкий | 2 месяца назад |
Уязвимостей на страницу