Fission: MessageQueueTrigger scaler manager materializes Secret values into Deployment envvars and accepts arbitrary user PodSpec in github.com/fission/fission

概要

参考情報

• fission/fission security advisory · ADVISORY
• fission/fission commit 94bf579 · FIX
• fission/fission#3367 · FIX
• fission/fission release v1.24.0 · WEB

github.com/fission/fission のその他の脆弱性

• GHSA-7m8x-qg2j-4m3v高 8.1Fission: MessageQueueTrigger scaler manager materializes Secret values into Deployment envvars and accepts arbitrary user PodSpec
• CVE-2026-50570高 8.5Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes…
• CVE-2026-50569中 4.3Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes…
• CVE-2026-50568低 3.6Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes…
• CVE-2026-50567高 7.7Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes…