Skip to content
OpenAdvisories

Product · ckotzbauer

vulnerability-operator

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-64858

    vulnerability-operator: IDOR exposing vulnerability reports via unauthenticated Report Handler

    vulnerability-operator scans SBOMs and Images for vulnerabilities. Prior to version 0.28.16, an unauthenticated information-disclosure vulnerability exposes all vulnerability scan reports served by the operator. The /report/ HTTP endpoint mounts a raw http.Fi…

    ckotzbauer vulnerability-operator