tocsin

CVE-2026-29773

2 advisories.

Go/github.com/kubewarden/kubewarden-controller CVE-2026-29773: medium 4.3, EPSS 0.33%

Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding

Action: Upgrade github.com/kubewarden/kubewarden-controller to 1.33.0 or later.

go get github.com/kubewarden/kubewarden-controller@v1.33.0

Affected

introducedfixedlast affected
01.33.0-

Fixed versions

1.33.0

Sources

CVE-2026-29773 · published · modified · JSON

Go/github.com/kubewarden/kubewarden-controller CVE-2026-29773: unknown, EPSS 0.33%

Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller

Action: Upgrade github.com/kubewarden/kubewarden-controller to 1.33.0 or later.

go get github.com/kubewarden/kubewarden-controller@v1.33.0

Affected

introducedfixedlast affected
01.33.0-

Fixed versions

1.33.0

Sources

CVE-2026-29773 · published · modified · JSON