46 matches found
PT-2026-69956
Name of the Vulnerable Software and Affected Versions Data Science Pipelines Operator affected versions not specified Description A flaw exists where the operator uses a cryptographically weak pseudo-random number generator PRNG—a mathematical algorithm used to generate sequences of numbers that...
PT-2026-69957
Name of the Vulnerable Software and Affected Versions Data Science Pipelines Operator affected versions not specified Description A flaw exists in the Data Science Pipelines Operator where a namespace editor can inject dangerous parameters into the MySQL Data Source Name DSN string via the...
CVE-2026-18617: Improperly Controlled Modification of Dynamically-Determined Object Attributes
A flaw was found in the Data Science Pipelines Operator DSPO. A namespace editor can exploit a vulnerability in the spec.database.customExtraParams field, which allows for the injection of dangerous parameters into the MySQL Data Source Name DSN string. By manipulating these parameters, an attack...
CVE-2026-18611: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
A flaw was found in the Data Science Pipelines Operator. This vulnerability allows an unauthenticated attacker to derive sensitive credentials, such as MariaDB root/user passwords and MinIO access/secret keys, if they can access the MinIO Route or MariaDB Service. The flaw occurs because the...
CVE-2026-18608: Execution with Unnecessary Privileges
A flaw was found in the Data Science Pipelines Operator DSPO. The operator's ClusterRole, which defines its permissions, includes extensive privileges beyond what is necessary for its operation. These excessive permissions, such as the ability to execute commands within pods and manage cluster-wi...
Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.21.2
The 1.21.2 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.21.2 release of Red Hat OpenShift Pipelines Operator...
Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.21.2
The 1.21.2 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.21.2 release of Red Hat OpenShift Pipelines Operator...
CVE-2026-10840: Incorrect Permission Assignment for Critical Resource
A flaw was found in the OpenShift Pipelines operator. The tekton-scheduler-rolebinding ClusterRoleBinding grants the system:authenticated group write access to Kueue and cert-manager custom resources via the tekton-scheduler-role ClusterRole. When Kueue or cert-manager CRDs are present on the...
Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.20.5
The 1.20.5 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.20.5 release of Red Hat OpenShift Pipelines Operator...
Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.20.5
The 1.20.5 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.20.5 release of Red Hat OpenShift Pipelines Operator...
Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.20.4
The 1.20.4 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.20.4 release of Red Hat OpenShift Pipelines Operator...
Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.20.4
The 1.20.4 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.20.4 release of Red Hat OpenShift Pipelines Operator...
Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.21.1
The 1.21.1 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.21.1 release of Red Hat OpenShift Pipelines Operator...
Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.21.1
The 1.21.1 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.21.1 release of Red Hat OpenShift Pipelines Operator...
Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.20.3
The 1.20.3 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.20. release of Red Hat OpenShift Pipelines Operator...
Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.20.3
The 1.20.3 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.20.3 release of Red Hat OpenShift Pipelines Operator...
Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.15.4
The 1.15.4 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.15.4 release of Red Hat OpenShift Pipelines Operator...
Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.15.4
The 1.15.4 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.15.4 release of Red Hat OpenShift Pipelines Operator...
Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.15.4
The 1.15.4 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.15.4 release of Red Hat OpenShift Pipelines Operator...
Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.21.0
The 1.21.0 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.21.0 release of Red Hat OpenShift Pipelines Operator...