CVE-2026-29954

KubePlus ResourceComposition ChartURL SSRF + Header Injection This vulnerability exists in the ResourceComposition resource handling component of KubePlus, allowing an attacker with Provider privileges to access internal services via SSRF by crafting a malicious chartURL parameter, and inject...