operator-sdk vulnerabilities

CVEs whose affected-version data names the operator-sdk package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-7195Medium· 6.4

1y ago

Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID

Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID. Operator-SDK before 0.15.2 provided a script, user_setup, which modifies the permissions of the /etc/p…

▾ Sunlitoperator-framework · operator-sdkEPSS 0.22%via NVD