Fission: MessageQueueTrigger scaler manager materializes Secret values into Deployment envvars and accepts arbitrary user PodSpec in github.com/fission/fission

Description

References

• fission/fission security advisory · ADVISORY
• fission/fission commit 94bf579 · FIX
• fission/fission#3367 · FIX
• fission/fission release v1.24.0 · WEB

Más vulnerabilidades de github.com/fission/fission

• GHSA-7m8x-qg2j-4m3vALTO 8.1Fission: MessageQueueTrigger scaler manager materializes Secret values into Deployment envvars and accepts arbitrary user PodSpec
• CVE-2026-50570ALTO 8.5Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes…
• CVE-2026-50569MEDIO 4.3Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes…
• CVE-2026-50568BAJO 3.6Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes…
• CVE-2026-50567ALTO 7.7Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes…