{"action":"Upgrade pepr to 1.0.5 or later.","affected":[{"fixed":"1.0.5","introduced":"0"}],"component":"pepr","cve_ids":["CVE-2026-23634"],"ecosystem":"npm","epss":0.00246,"exploited":false,"fixed_versions":["1.0.5"],"ghsa_id":"GHSA-w54x-r83c-x79q","id":"tcs_01M5KGDZ36AZFVETP6NGW9MMG9","modified_at":"2026-02-03T03:15:33.104947Z","published_at":"2026-01-15T20:14:31Z","references":["https://osv.dev/vulnerability/GHSA-w54x-r83c-x79q","https://github.com/defenseunicorns/pepr/security/advisories/GHSA-w54x-r83c-x79q","https://nvd.nist.gov/vuln/detail/CVE-2026-23634","https://github.com/defenseunicorns/pepr/pull/2883","https://github.com/defenseunicorns/pepr/commit/d4675a662b8602fcde7e4bf603432f2f133b1fd1","https://github.com/defenseunicorns/pepr","https://github.com/defenseunicorns/pepr/releases/tag/v1.0.5"],"severity":{"label":"unknown","score":0},"sources":[{"source":"osv","source_id":"GHSA-w54x-r83c-x79q","url":"https://osv.dev/vulnerability/GHSA-w54x-r83c-x79q"}],"summary":"Pepr Has Overly Permissive RBAC ClusterRole in Admin Mode"}