osac-operator vulnerabilities

CVEs whose affected-version data names the osac-operator package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-62284High· 8.6

1w ago

OSAC operator: Kubeconfig credential-plugin execution and SSRF in console proxy

OSAC operator is a Kubernetes operator. In the affected revision identified as 8220502, the `console-proxy` `RemoteConfigResolver` parses Kubernetes Secret kubeconfig data with `clientcmd.RESTConfigFromKubeConfig` without sanitizing the …

▾ Twilightosac-project · osac-operatorEPSS 0.51%via CVEORG