Most recent entries from all

EUVD-2026-342610

fkie_cve-2026-18382

A flaw was found in koku-metrics-operator. The operator's CostManagementMetricsConfig custom resource allows a user able to edit the CR to specify an arbitrary OAuth token endpoint. When authentication.type is set to service-account, the operator sends the tenant's Red Hat SSO client_id and client_secret to this user-controlled URL, allowing the attacker to obtain the credentials.

GHSA-3f36-c5m8-4frw

RHSA-2026:81201 — Red Hat Security Advisory: Cost Management Metrics Operator Update

glibc: glibc: Out-of-bounds write via TSIG record processing glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings glibc: glibc: Application crash or uninitialized memory read via crafted DNS response p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server project-koku/koku-metrics-operator: koku-metrics-operator: cluster pull-secret token exfiltration via user-controlled api_url (SSRF / confused deputy) project-koku/koku-metrics-operator: koku-metrics-operator: operator service-account token exfiltration via user-controlled Prometheus service_address project-koku/koku-metrics-operator: koku-metrics-operator: service-account client credentials sent to user-controlled token_url openssl: QUIC server may trigger double free when processing INITIAL packet acl: Symlink traversal privilege escalation via libacl functions attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values openssl: heap buffer overflow in CMS key unwrapping openssl: invalid pointer dereference in CMP server via crafted protectionAlg