CVE-2026-50570
2 advisories.
Go/github.com/fission/fission CVE-2026-50570: high 8.5, EPSS 0.46%
Fission: Incomplete capability denylist in Environment/Function PodSpec validation allows tenant-added CAP_SYS_TIME and cross-tenant node wall-clock corruption
Action: Upgrade github.com/fission/fission to 1.25.0 or later.
go get github.com/fission/fission@v1.25.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.25.0 | - |
Fixed versions
| 1.25.0 |
Sources
- osv: GHSA-qf5v-m7p4-95rp
- https://github.com/fission/fission/security/advisories/GHSA-qf5v-m7p4-95rp
- https://nvd.nist.gov/vuln/detail/CVE-2026-50570
- https://github.com/fission/fission/pull/3465
- https://github.com/fission/fission/commit/2569b42bfadbcb7d78b55a00a60f77937e522699
- https://github.com/fission/fission
- https://github.com/fission/fission/releases/tag/v1.25.0
CVE-2026-50570 · published · modified · JSON
Go/github.com/fission/fission CVE-2026-50570: unknown, EPSS 0.46%
Fission: Incomplete capability denylist in Environment/Function PodSpec validation allows tenant-added CAP_SYS_TIME and cross-tenant node wall-clock corruption in github.com/fission/fission
Action: Upgrade github.com/fission/fission to 1.25.0 or later.
go get github.com/fission/fission@v1.25.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.25.0 | - |
Fixed versions
| 1.25.0 |
Sources
- osv: GO-2026-6129
- https://github.com/fission/fission/security/advisories/GHSA-qf5v-m7p4-95rp
- https://nvd.nist.gov/vuln/detail/CVE-2026-50570
- https://github.com/fission/fission/commit/2569b42bfadbcb7d78b55a00a60f77937e522699
- https://github.com/fission/fission/pull/3465
- https://github.com/fission/fission/releases/tag/v1.25.0
CVE-2026-50570 · published · modified · JSON