https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-01T02:36:44.216860+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/ghsa-r6j8-c6r2-37rr GHSA-r6j8-c6r2-37rr — kube-controller-manager is vulnerable to half-blind Server Side Request Forgery through in-tree Portworx StorageClass 2026-10-01T02:36:44.218718+00:00

Affected: Go: k8s.io/kubernetes

A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network (including link-local or loopback services).