Fission: Incomplete capability denylist in Environment/Function PodSpec validation allows tenant-added CAP_SYS_TIME a...

Date Jul 28, 2026

Type Vendor advisory

Signal High-risk advisory

Vendor / Product Go · github.com/fission/fission

CVE CVE-2026-50570

High-risk advisory CVE-2026-50570

Summary

Fission: Incomplete capability denylist in Environment/Function PodSpec validation allows tenant-added CAP_SYS_TIME and cross-tenant node wall-clock corruption

Why it matters

GitHub has published a reviewed security advisory for github.com/fission/fission. Prioritize it with other application dependency updates, especially because EPSS places it in the 20% percentile.

Operator check

Check whether github.com/fission/fission is present in application dependency manifests, lockfiles, or build images. Review the GitHub advisory and upgrade to a patched version where available. EPSS probability: 0.3%; percentile: 20%.

Sources

GitHub Advisory GHSA-qf5v-m7p4-95rp NVD — CVE-2026-50570 Source reference

PatchBrief uses public sources. It does not scan environments, verify exposure, or replace vendor guidance.

Get watched-vendor alerts Subscribe free Back to feed