konflux-ci
by Konflux Ci
CVEs (4)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-114217 | imp | 0.56 | 8.6 | — | Oct 30, 2026 | konflux-ci: GitHub Token Plaintext Exposure in CI/CD Scripts | ||
| CVE-2026-116964 | imp | 0.55 | 8.4 | — | Oct 30, 2026 | konflux-ci: Remote Code Execution via eval() in Manifest Scripts | ||
| CVE-2026-117681 | imp | 0.52 | 8.0 | — | Oct 28, 2026 | konflux-ci: UI proxy skips backend TLS verification on non-OpenShift clusters, leaking a token that can impersonate anyone | ||
| CVE-2026-116958 | mod | 0.44 | 6.7 | — | Oct 30, 2026 | konflux-ci: Unquoted Variable Expansion in Shell Command Execution |
- risk 0.56cvss 8.6epss —
konflux-ci: GitHub Token Plaintext Exposure in CI/CD Scripts
- risk 0.55cvss 8.4epss —
konflux-ci: Remote Code Execution via eval() in Manifest Scripts
- risk 0.52cvss 8.0epss —
konflux-ci: UI proxy skips backend TLS verification on non-OpenShift clusters, leaking a token that can impersonate anyone
- risk 0.44cvss 6.7epss —
konflux-ci: Unquoted Variable Expansion in Shell Command Execution