Skip to content
OpenAdvisories

Package · Go

github.com/fission/fission

18 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.6
    CVE-2026-50568

    Fission: SanitizeFilePath lexical HasPrefix bypass permits sibling-directory escape

    Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.25.0, SanitizeFilePath in pkg/utils/utils.go validated that a path stayed under a safe directory b…

    fission fission github.com/fission/fission Go