Skip to content
OpenAdvisories

Vendor

osac-project

1 known vulnerabilities.

Products

osac-operator 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2026-62284

    OSAC operator: Kubeconfig credential-plugin execution and SSRF in console proxy

    OSAC operator is a Kubernetes operator. In the affected revision identified as 8220502, the `console-proxy` `RemoteConfigResolver` parses Kubernetes Secret kubeconfig data with `clientcmd.RESTConfigFromKubeConfig` without sanitizing the resulting `rest.Config…

    osac-project osac-operator github.com/osac-project/osac-operator Go