Threats Tagged 'ghsa-qf5v-m7p4-95rp'
View all threats tagged with 'ghsa-qf5v-m7p4-95rp'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-qf5v-m7p4-95rp'
Click on any threat for detailed analysis and mitigation recommendations
Fission versions up to 1.24.0 implemented PodSpec validation with a fixed denylist of Linux capabilities but omitted CAP_SYS_TIME. This omission allows tenants to add CAP_SYS_TIME to their function or environment containers, enabling them to alter the node's real-time clock. Since the Linux real-time clock is shared across the node, this can corrupt time-dependent operations for all workloads on that node. The vulnerability is fixed in Fission 1.25.0 by replacing the denylist with a restrictive allowlist for capabilities. The issue does not apply if a restrictive Pod Security Admission profile is enforced on the function-pod namespace. Join the discussion | GCVE Database | 07/28/2026, 20:12:45 UTC Added: 07/28/2026, 23:52:04 UTC |
Showing 1 to 1 of 1 result