https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 04:05:40 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-343517 EUVD-2026-343517 https://cve.radiocsirt.org/vuln/euvd-2026-343517 https://cve.radiocsirt.org/vuln/fkie_cve-2026-18378 <p>A flaw was found in koku-metrics-operator. The operator&#39;s CostManagementMetricsConfig custom resource allows user able to edit the CR to specify an arbitrary upload URL. When authentication.type is set to token (the default), the cluster-global Red Hat Cloud pull-secret bearer token is attached to HTTP requests sent to this user-controlled URL, allowing the attacker to obtain the token.</p> <p>A flaw was found in koku-metrics-operator. The operator&#39;s CostManagementMetricsConfig custom resource allows user able to edit the CR to specify an arbitrary upload URL. When authentication.type is set to token (the default), the cluster-global Red Hat Cloud pull-secret bearer token is attached to HTTP requests sent to this user-controlled URL, allowing the attacker to obtain the token.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-18378 https://cve.radiocsirt.org/vuln/ghsa-8jfr-h5wv-8vhv <p>A flaw was found in koku-metrics-operator. The operator&#39;s CostManagementMetricsConfig custom resource allows user able to edit the CR to specify an arbitrary upload URL. When authentication.type is set to token (the default), the cluster-global Red Hat Cloud pull-secret bearer token is attached to HTTP requests sent to this user-controlled URL, allowing the attacker to obtain the token.</p> <p>A flaw was found in koku-metrics-operator. The operator&#39;s CostManagementMetricsConfig custom resource allows user able to edit the CR to specify an arbitrary upload URL. When authentication.type is set to token (the default), the cluster-global Red Hat Cloud pull-secret bearer token is attached to HTTP requests sent to this user-controlled URL, allowing the attacker to obtain the token.</p> https://cve.radiocsirt.org/vuln/ghsa-8jfr-h5wv-8vhv https://cve.radiocsirt.org/vuln/rhsa-2026:81201 <p>glibc: glibc: Out-of-bounds write via TSIG record processing glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings glibc: glibc: Application crash or uninitialized memory read via crafted DNS response p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server project-koku/koku-metrics-operator: koku-metrics-operator: cluster pull-secret token exfiltration via user-controlled api_url (SSRF / confused deputy) project-koku/koku-metrics-operator: koku-metrics-operator: operator service-account token exfiltration via user-controlled Prometheus service_address project-koku/koku-metrics-operator: koku-metrics-operator: service-account client credentials sent to user-controlled token_url openssl: QUIC server may trigger double free when processing INITIAL packet acl: Symlink traversal privilege escalation via libacl functions attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values openssl: heap buffer overflow in CMS key unwrapping openssl: invalid pointer dereference in CMP server via crafted protectionAlg</p> <p>glibc: glibc: Out-of-bounds write via TSIG record processing glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings glibc: glibc: Application crash or uninitialized memory read via crafted DNS response p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server project-koku/koku-metrics-operator: koku-metrics-operator: cluster pull-secret token exfiltration via user-controlled api_url (SSRF / confused deputy) project-koku/koku-metrics-operator: koku-metrics-operator: operator service-account token exfiltration via user-controlled Prometheus service_address project-koku/koku-metrics-operator: koku-metrics-operator: service-account client credentials sent to user-controlled token_url openssl: QUIC server may trigger double free when processing INITIAL packet acl: Symlink traversal privilege escalation via libacl functions attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values openssl: heap buffer overflow in CMS key unwrapping openssl: invalid pointer dereference in CMP server via crafted protectionAlg</p> https://cve.radiocsirt.org/vuln/rhsa-2026:81201