Skip to content
OpenAdvisories

Package · Go

github.com/osac-project/osac-operator

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.6
    CVE-2026-62284

    OSAC operator: Kubeconfig credential-plugin execution and SSRF in console proxy

    OSAC operator is a Kubernetes operator. In the affected revision identified as 8220502, the `console-proxy` `RemoteConfigResolver` parses Kubernetes Secret kubeconfig data with `clientcmd.RESTConfigFromKubeConfig` without sanitizing the resulting `rest.Config…

    osac-project osac-operator github.com/osac-project/osac-operator Go