Fission: MessageQueueTrigger scaler manager materializes Secret values into Deployment envvars and accepts arbitrary user PodSpec in github.com/fission/fission

Description

References

• fission/fission security advisory · ADVISORY
• fission/fission commit 94bf579 · FIX
• fission/fission#3367 · FIX
• fission/fission release v1.24.0 · WEB

More vulnerabilities in github.com/fission/fission

• GHSA-7m8x-qg2j-4m3vHIGH 8.1Fission: MessageQueueTrigger scaler manager materializes Secret values into Deployment envvars and accepts arbitrary user PodSpec
• CVE-2026-50570HIGH 8.5Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes…
• CVE-2026-50569MEDIUM 4.3Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes…
• CVE-2026-50568LOW 3.6Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes…
• CVE-2026-50567HIGH 7.7Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes…