Vendor
Konflux Ci
Products
2
CVEs
5
Across products
5
Status
Private
Products
2- 4 CVEs
- 1 CVE
Recent CVEs
5| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-116086 | imp | 0.57 | 8.8 | — | Oct 30, 2026 | konflux-ci: jq Filter Injection in GitHub Workflow Issue Management | ||
| CVE-2026-114217 | imp | 0.56 | 8.6 | — | Oct 30, 2026 | konflux-ci: GitHub Token Plaintext Exposure in CI/CD Scripts | ||
| CVE-2026-116964 | imp | 0.55 | 8.4 | — | Oct 30, 2026 | konflux-ci: Remote Code Execution via eval() in Manifest Scripts | ||
| CVE-2026-117681 | imp | 0.52 | 8.0 | — | Oct 28, 2026 | konflux-ci: UI proxy skips backend TLS verification on non-OpenShift clusters, leaking a token that can impersonate anyone | ||
| CVE-2026-116958 | mod | 0.44 | 6.7 | — | Oct 30, 2026 | konflux-ci: Unquoted Variable Expansion in Shell Command Execution |
- risk 0.57cvss 8.8epss —
konflux-ci: jq Filter Injection in GitHub Workflow Issue Management
- risk 0.56cvss 8.6epss —
konflux-ci: GitHub Token Plaintext Exposure in CI/CD Scripts
- risk 0.55cvss 8.4epss —
konflux-ci: Remote Code Execution via eval() in Manifest Scripts
- risk 0.52cvss 8.0epss —
konflux-ci: UI proxy skips backend TLS verification on non-OpenShift clusters, leaking a token that can impersonate anyone
- risk 0.44cvss 6.7epss —
konflux-ci: Unquoted Variable Expansion in Shell Command Execution