Process Automation Manager Open Edition Starter Kit for Banking (<= 9.4.1)

IBM Application Gateway Operator versions 22.2 through 26.06 contain a Server-Side Request Forgery vulnerability due to improper URL validation in custom resources, potentially allowing unauthorized access to internal resources.