42 matches found
GHSA-5587-2X54-JJ6H Skipper's routesrv-no-auth component: All routesrv API Endpoints Lack Authentication
Description The routesrv component exposes the full cluster route topology Ingress/RouteGroup configurations, backend URLs, filter chains, OAuth/OIDC callback paths and cache-cluster topology Redis/Valkey shard addresses over plain HTTP with zero authentication. Any pod in the Kubernetes cluster...