Go/github.com/openshift/cluster-logging-operator CVE-2026-10609: unknown, EPSS 0.38%

OpenShift Cluster Logging Operator missing authorization flaw in github.com/openshift/cluster-logging-operator

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-6590
• https://github.com/advisories/GHSA-9xm2-gw56-wj7m
• https://nvd.nist.gov/vuln/detail/CVE-2026-10609
• https://github.com/openshift/cluster-logging-operator/commit/1864c2a9851da90a3956f1b83c5f31b3b76e3514
• https://github.com/openshift/cluster-logging-operator/pull/3383
• https://access.redhat.com/security/cve/CVE-2026-10609
• https://bugzilla.redhat.com/show_bug.cgi?id=2483943

CVE-2026-10609 · published 2026-10-01T20:23:38Z · modified 2026-10-01T20:45:15.934222442Z · JSON