VYPR

Vulnerability Operator

by Ckotzbauer

CVEs (1)

  • CVE-2026-64858MedNov 11, 2026
    risk 0.27cvss 5.3epss —

    vulnerability-operator scans SBOMs and Images for vulnerabilities. Prior to version 0.28.16, an unauthenticated information-disclosure vulnerability exposes all vulnerability scan reports served by the operator. The /report/ HTTP endpoint mounts a raw http.FileServer over the…