Go/github.com/fission/fission CVE-2026-46612: high 8.8, EPSS 0.34%

Fission StorageSvc /v1/archive endpoint exposes unauthenticated CRUD over all function archives

Action: Upgrade github.com/fission/fission to 1.23.0 or later.

go get github.com/fission/fission@v1.23.0

Affected

Fixed versions

Sources

• osv: GHSA-chf8-4hv6-8pg6
• https://github.com/fission/fission/security/advisories/GHSA-chf8-4hv6-8pg6
• https://nvd.nist.gov/vuln/detail/CVE-2026-46612
• https://github.com/fission/fission/pull/3365
• https://github.com/fission/fission/pull/3368
• https://github.com/fission/fission
• https://github.com/fission/fission/releases/tag/v1.23.0

CVE-2026-46612 · published 2026-05-21T20:07:13Z · modified 2026-07-21T13:58:59Z · JSON