CVE-2025-11567: Unescaped User-Controlled Variables Leading to Shell Injection and Arbitrary Resource Creation in Kubernetes

github.com 2026-08-18查看中文 →

Security AdvisoryGHSA-xffv-fp7q-v2zcHighopenshift-metal3/fakefish

Affected:

openshift-metal3/fakefish <= 28f9a0b

Fixed in:

526550a

Referenced CVEs: CVE-2026-71567 · 7.7

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

SpiderFoot Stored XSS via Unescaped Correlation Titles (#2012) 2026-08-18 Bastillion Unauthenticated Admin Bypass via Path Prefix Routing Mismatch 2026-08-18 Fix: Auth Bypass via URI, Unauth WebSocket Access, Brute-Force Throttling 2026-08-18 RCE Vulnerability in loophole-mvc BaseKontrol Dynamic Class Loading 2026-08-18 ERP Document Upload Validation Bypass & Code Fix 2026-08-18

Offline Archive

Offline screenshot & PDF are Pro-exclusive