Cloud Pak for Business Automation (24.0.0, 24.0.1, 25.0.0, 26.0.0)

IBM Application Gateway Operator versions 22.2 through 26.06 contain a Server-Side Request Forgery vulnerability due to improper URL validation in custom resources, potentially allowing unauthorized access to internal resources.