{}

{}

{}

{"bugzilla": {"description": "operator-foundry: operator-foundry: No automated dependency-update or vulnerability-scanning configuration", "id": "2530053", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2530053"}, "csaw": false, "cvss3": {"cvss3_base_score": "2.6", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N", "status": "draft"}, "cwe": "CWE-1104", "details": ["A flaw was found in operator-foundry. The absence of automated dependency-update and vulnerability-scanning configurations in the repository increases the risk of undetected security vulnerabilities. This lack of automated security checks could potentially lead to the inclusion of known vulnerable components, which might then be exploited by an attacker if those underlying vulnerabilities are present and exploitable."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}, "name": "CVE-2026-87052", "public_date": "2026-09-08T19:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-87052\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-87052"], "statement": "This issue has a Low impact as it describes the absence of automated dependency updates and vulnerability scanning within the `operator-foundry` component's development process. This does not represent a direct runtime vulnerability in Red Hat products but rather a potential for future vulnerabilities to go undetected during development.", "threat_severity": "Low"}

{}