npm/pepr CVE-2026-23634: unknown 0, EPSS 0.25%
Pepr Has Overly Permissive RBAC ClusterRole in Admin Mode
Action: Upgrade pepr to 1.0.5 or later.
npm i pepr@1.0.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.5 | - |
Fixed versions
| 1.0.5 |
Sources
- osv: GHSA-w54x-r83c-x79q
- https://github.com/defenseunicorns/pepr/security/advisories/GHSA-w54x-r83c-x79q
- https://nvd.nist.gov/vuln/detail/CVE-2026-23634
- https://github.com/defenseunicorns/pepr/pull/2883
- https://github.com/defenseunicorns/pepr/commit/d4675a662b8602fcde7e4bf603432f2f133b1fd1
- https://github.com/defenseunicorns/pepr
- https://github.com/defenseunicorns/pepr/releases/tag/v1.0.5
CVE-2026-23634 · published · modified · JSON