devworkspace_operator vulnerabilities

CVEs whose affected-version data names the devworkspace_operator package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-46595High· 7.1⚖ disputed

4mo ago

golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation (CVE-2026-46595)

A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This…

▾ TwilightRed Hat · Red Hat Openshift Data Foundation 4.22EPSS 0.50%via CSAF