osac-project vulnerabilities (CVE)

CVE records published for osac-project, newest first. Follow to get an email when a new one appears.

1 results

8.6High

CVE-2026-62284 11 days ago

OSAC operator: Kubeconfig credential-plugin execution and SSRF in console proxy

osac-project osac-operator

OSAC operator is a Kubernetes operator. In the affected revision identified as 8220502, the `console-proxy` `RemoteConfigResolver` parses Kubernetes Secret kubeconfig data with `clientcmd.RESTConfigFromKubeConfig` without sanitizing the resulting `rest.Config…