operator-sdk-builder
CVEs (4)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-87054 | mod | 0.27 | 4.2 | — | Sep 8, 2026 | operator-sdk-builder: operator-sdk-builder: containers-policy.json defaults to insecureAcceptAnything for non-Red Hat registries | ||
| CVE-2026-87053 | mod | 0.27 | 4.2 | — | Sep 8, 2026 | operator-sdk-builder: operator-sdk-builder: Final container image runs as root (USER root never reverted) | ||
| CVE-2026-87055 | low | 0.17 | 2.6 | — | Sep 8, 2026 | operator-sdk-builder: operator-sdk-builder: Base image referenced by mutable tag rather than sha256 digest | ||
| CVE-2026-87056 | low | 0.17 | 2.6 | — | Sep 8, 2026 | operator-sdk-builder: operator-sdk-builder: No automated dependency-update configuration for submodules or Containerfile |
- risk 0.27cvss 4.2epss —
operator-sdk-builder: operator-sdk-builder: containers-policy.json defaults to insecureAcceptAnything for non-Red Hat registries
- risk 0.27cvss 4.2epss —
operator-sdk-builder: operator-sdk-builder: Final container image runs as root (USER root never reverted)
- risk 0.17cvss 2.6epss —
operator-sdk-builder: operator-sdk-builder: Base image referenced by mutable tag rather than sha256 digest
- risk 0.17cvss 2.6epss —
operator-sdk-builder: operator-sdk-builder: No automated dependency-update configuration for submodules or Containerfile