tocsin

CVE-2026-49824

2 advisories.

Go/github.com/fission/fission CVE-2026-49824: high 8.5, EPSS 0.39%

Fission: Cross-namespace Environment reference via unvalidated EnvironmentRef in Function admission webhook

Action: Upgrade github.com/fission/fission to 1.24.0 or later.

go get github.com/fission/fission@v1.24.0

Affected

introducedfixedlast affected
01.24.0-

Fixed versions

1.24.0

Sources

CVE-2026-49824 · published · modified · JSON

Go/github.com/fission/fission CVE-2026-49824: unknown, EPSS 0.39%

Fission: Cross-namespace Environment reference via unvalidated EnvironmentRef in Function admission webhook in github.com/fission/fission

Action: Upgrade github.com/fission/fission to 1.24.0 or later.

go get github.com/fission/fission@v1.24.0

Affected

introducedfixedlast affected
01.24.0-

Fixed versions

1.24.0

Sources

CVE-2026-49824 · published · modified · JSON