CVE-2026-125637

konflux-ci: Unvalidated hostname fields enable Caddyfile config injection in the Konflux UI proxy generator, allowing an unauthenticated route to be spliced…

konflux-ci

konflux-ci: Unvalidated hostname fields enable Caddyfile config injection in the Konflux UI proxy generator, allowing an unauthenticated route to be spliced ahead of the forward_auth/impersonate authorization chain

10. Nov 2026

Ausgewertete Quellen

• Red Hat
  Red Hat