{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/openshift-gitops/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["OpenShift GitOps"],"_cs_severities":["medium"],"_cs_tags":["vulnerability","cloud","openshift"],"_cs_type":"advisory","_cs_vendors":["Red Hat"],"content_html":"\u003cp\u003eRed Hat OpenShift GitOps contains a vulnerability involving the go-git library that allows a remote, unauthenticated attacker to manipulate files or access sensitive information within the environment. Specific details regarding the exploitation vector and affected versions remain pending further disclosure from the vendor.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInventory instances of Red Hat OpenShift GitOps to assess current exposure.\u003c/li\u003e\n\u003cli\u003eMonitor the Red Hat security advisory portal for upcoming patch releases and CVE identifiers associated with this issue.\u003c/li\u003e\n\u003cli\u003eReview access logs and integrity monitoring for file-system changes in environments managing Git repositories via OpenShift GitOps.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-27T17:35:19Z","date_published":"2026-10-27T17:35:19Z","id":"https://feed.craftedsignal.io/briefs/2026-10-redhat-openshift-gitops-gogit/","summary":"A vulnerability in the go-git library integrated into Red Hat OpenShift GitOps may allow an unauthenticated remote attacker to manipulate files or disclose sensitive information.","title":"Red Hat OpenShift GitOps: File manipulation and information disclosure","url":"https://feed.craftedsignal.io/briefs/2026-10-redhat-openshift-gitops-gogit/"}],"language":"en","title":"CraftedSignal Threat Feed - OpenShift GitOps","version":"https://jsonfeed.org/version/1.1"}