Lucene search
+L

174 matches found

Github Security Blog
Github Security Blog
added 2026/07/17 9:46 p.m.14 views

Skipper's routesrv-no-auth component: All routesrv API Endpoints Lack Authentication

Description The routesrv component exposes the full cluster route topology Ingress/RouteGroup configurations, backend URLs, filter chains, OAuth/OIDC callback paths and cache-cluster topology Redis/Valkey shard addresses over plain HTTP with zero authentication. Any pod in the Kubernetes cluster...

5.4AI score
SaveExploits0References3Affected Software1
Rows per page
Query Builder