Go/github.com/fission/fission CVE-2026-50569: medium 4.3, EPSS 0.39%

Fission: HTTPTrigger admission omits RelativeURL / Prefix validation; kubectl apply bypasses CLI checks

Action: Upgrade github.com/fission/fission to 1.25.0 or later.

go get github.com/fission/fission@v1.25.0

Affected

Fixed versions

Sources

• osv: GHSA-vchh-r53j-8mpw
• https://github.com/fission/fission/security/advisories/GHSA-vchh-r53j-8mpw
• https://nvd.nist.gov/vuln/detail/CVE-2026-50569
• https://github.com/fission/fission/pull/3464
• https://github.com/fission/fission/commit/0deed6bf3f26bc0f10e9130cd0d479b0b9f5f609
• https://github.com/fission/fission
• https://github.com/fission/fission/releases/tag/v1.25.0

CVE-2026-50569 · published 2026-07-28T20:16:00Z · modified 2026-08-18T15:10:29.945955856Z · JSON