osac-operator vulnerabilities

1 known vulnerability in osac-operator from Osac-project. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  osac-operator: Improper Control of Generation of Code

  CVE-2026-62284Oct 30, 2026Osac-project

  OSAC operator is a Kubernetes operator. In the affected revision identified as 8220502, the `console-proxy` `RemoteConfigResolver` parses Kubernetes Secret kubeconfig data with `clientcmd.RESTConfigFromKubeConfig` without sanitizing the resulting `rest.Config`