Kubernetes
A confused deputy attack exists in the StatefulSet controller that allows a user with namespace-scoped write permissions on StatefulSet and ControllerRevision objects to create a cross-namespace pod…
Corregida en Debian 12, Debian 13 y Debian 14.