https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 06:39:46 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-380653 EUVD-2026-380653 https://cve.radiocsirt.org/vuln/euvd-2026-380653 https://cve.radiocsirt.org/vuln/fkie_cve-2026-42965 <p>A flaw was found in the OpenShift Router. A user with EndpointSlice write access can exploit this vulnerability by creating a Service backed by an FQDN (Fully Qualified Domain Name) EndpointSlice that resolves to a cloud metadata endpoint. This allows the router to proxy requests to the cloud metadata endpoint, leading to the disclosure of instance credentials and other sensitive metadata. This bypasses previous security measures for validating IP addresses.</p> <p>A flaw was found in the OpenShift Router. A user with EndpointSlice write access can exploit this vulnerability by creating a Service backed by an FQDN (Fully Qualified Domain Name) EndpointSlice that resolves to a cloud metadata endpoint. This allows the router to proxy requests to the cloud metadata endpoint, leading to the disclosure of instance credentials and other sensitive metadata. This bypasses previous security measures for validating IP addresses.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-42965 https://cve.radiocsirt.org/vuln/ghsa-76ww-43j5-78x5 <p>A flaw was found in the OpenShift Router. A user with EndpointSlice write access can exploit this vulnerability by creating a Service backed by an FQDN (Fully Qualified Domain Name) EndpointSlice that resolves to a cloud metadata endpoint. This allows the router to proxy requests to the cloud metadata endpoint, leading to the disclosure of instance credentials and other sensitive metadata. This bypasses previous security measures for validating IP addresses.</p> <p>A flaw was found in the OpenShift Router. A user with EndpointSlice write access can exploit this vulnerability by creating a Service backed by an FQDN (Fully Qualified Domain Name) EndpointSlice that resolves to a cloud metadata endpoint. This allows the router to proxy requests to the cloud metadata endpoint, leading to the disclosure of instance credentials and other sensitive metadata. This bypasses previous security measures for validating IP addresses.</p> https://cve.radiocsirt.org/vuln/ghsa-76ww-43j5-78x5 https://cve.radiocsirt.org/vuln/rhsa-2026:54583 <p>golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting net/mail: golang: Go net/mail: Denial of Service via crafted email inputs net/mail: golang: net/mail: Denial of Service via pathological email address parsing openshift/router: openshift/router: cloud metadata SSRF via FQDN-typed EndpointSlice bypasses destination validation openstack-ironic: Prevent rehoming resources to nodes with different owner openshift/console: Authenticated SSRF with full response reflection and path neutralization via Dev Console webhook helpers in OpenShift Console openshift/console: Namespace tenant SSRF with egress bypass, catalog poisoning, and admin-mediated supply chain escalation via ProjectHelmChartRepository in OpenShift Console</p> <p>golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting net/mail: golang: Go net/mail: Denial of Service via crafted email inputs net/mail: golang: net/mail: Denial of Service via pathological email address parsing openshift/router: openshift/router: cloud metadata SSRF via FQDN-typed EndpointSlice bypasses destination validation openstack-ironic: Prevent rehoming resources to nodes with different owner openshift/console: Authenticated SSRF with full response reflection and path neutralization via Dev Console webhook helpers in OpenShift Console openshift/console: Namespace tenant SSRF with egress bypass, catalog poisoning, and admin-mediated supply chain escalation via ProjectHelmChartRepository in OpenShift Console</p> https://cve.radiocsirt.org/vuln/rhsa-2026:54583