Lucene search
+L

1 matches found

OSV
OSV
added 2026/07/28 8:16 p.m.8 views

GHSA-VCHH-R53J-8MPW Fission: HTTPTrigger admission omits RelativeURL / Prefix validation; kubectl apply bypasses CLI checks

HTTPTriggerSpec.Validate validated Methods, FunctionReference, Host, IngressConfig, and CorsConfig, but silently skipped RelativeURL and Prefix. Those two fields were validated at the CLI level only pkg/fission-cli/cmd/httptrigger/create.go:83. The post-CRD-modernization webhook for HTTPTrigger w...

4.3CVSS5.8AI score0.00227EPSS
SaveExploits0References6
Rows per page
Query Builder