2 matches found
Important: runfinch-finch
Issue Overview: On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symboli...
7.8CVSS7.8AI score0.00744EPSS
SaveExploits0
PT-2026-54443
Name of the Vulnerable Software and Affected Versions Fulcio versions prior to 1.8.6 Description Fulcio improperly handles cross-host redirects and Kubernetes ServiceAccount tokens during OIDC discovery, specifically when fetching metadata from the /.well-known/openid-configuration endpoint. This...
8.7CVSS7.6AI score0.00282EPSS
SaveExploits0
20