[ Vendor · 1 CVEs ]

openchoreo

CVEs affecting openchoreo published in the last 30 days, plus any openchoreo CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-113727 20 Oct 2026 CVSS 7.4 OpenChoreo: Authorization bypass on WorkflowRun update allows cross-project takeover of workflow runsOpenChoreo is a developer platform for Kubernetes. From 1.0.0 until 1.0.6, 1.1.7, and 1.2.5, the PUT .../workflowruns/{runName} update route… Fix