tocsin

Go/github.com/metal3-io/baremetal-operator CVE-2024-43803: medium 4.9, EPSS 0.57%

The Bare Metal Operator (BMO) can expose particularly named secrets from other namespaces via BMH CRD

Action: Upgrade github.com/metal3-io/baremetal-operator to 0.5.2 or later.

go get github.com/metal3-io/baremetal-operator@v0.8.0
go get github.com/metal3-io/baremetal-operator@v0.6.2
go get github.com/metal3-io/baremetal-operator@v0.5.2

Affected

introducedfixedlast affected
0.7.0-rc.00.8.0-
0.6.00.6.2-
00.5.2-

Fixed versions

0.8.00.6.20.5.2

Sources

CVE-2024-43803 · published · modified · JSON