CVE-2026-49821

7.7 Élevée

Publiée le 10/06/2026 à 20:17 · Modifiée le 17/06/2026 à 12:55 · Analyse NVD reportée · Source : security-advisories@github.com

Description

Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.24.0, Fission's buildermgr controller processed Package CRDs without verifying that Package.spec.environment.namespace matched Package.metadata.namespace. This issue has been patched in version 1.24.0.

Traduire en français

Produits concernés

fission

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.7 Élevée	security-advisories@github.com	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N`

Faiblesses (CWE)

CWE-441
CWE-862

Références

https://github.com/fission/fission/pull/3379
https://github.com/fission/fission/releases/tag/v1.24.0
https://github.com/fission/fission/security/advisories/GHSA-vjhc-cf4p-72q4

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories