Vendor
Konflux Operator Tasks
Products
1
CVEs
4
Across products
4
Status
Private
Products
1- 4 CVEs
Recent CVEs
4| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-87062 | mod | 0.27 | 4.2 | — | Sep 8, 2026 | konflux-operator-tasks: konflux-operator-tasks: GitHub Actions referenced by mutable tag/branch instead of commit SHA | ||
| CVE-2026-87064 | low | 0.17 | 2.6 | — | Sep 8, 2026 | konflux-operator-tasks: konflux-operator-tasks: GitHub workflows lack explicit least-privilege permissions blocks | ||
| CVE-2026-87065 | low | 0.17 | 2.6 | — | Sep 8, 2026 | konflux-operator-tasks: konflux-operator-tasks: Tekton task steps run as root without defense-in-depth securityContext hardening | ||
| CVE-2026-87063 | low | 0.17 | 2.6 | — | Sep 8, 2026 | konflux-operator-tasks: konflux-operator-tasks: tkn CLI installed from network without checksum or signature verification |
- risk 0.27cvss 4.2epss —
konflux-operator-tasks: konflux-operator-tasks: GitHub Actions referenced by mutable tag/branch instead of commit SHA
- risk 0.17cvss 2.6epss —
konflux-operator-tasks: konflux-operator-tasks: GitHub workflows lack explicit least-privilege permissions blocks
- risk 0.17cvss 2.6epss —
konflux-operator-tasks: konflux-operator-tasks: Tekton task steps run as root without defense-in-depth securityContext hardening
- risk 0.17cvss 2.6epss —
konflux-operator-tasks: konflux-operator-tasks: tkn CLI installed from network without checksum or signature verification