2 CVEs in 2 Metal3 products, including Ip-Address-Manager, Ironic-Image. Newest: CVE-2026-47190 (2026-06-12). Severity, EPSS and public exploits for each.
IPAM is the IP address Manager for Cluster API Provider Metal3. Prior to versions 1.11.7, 1.12.4, and 1.13.0, the IPAM controller's ClusterRole granted full CR…
ironic-image is a container image to run OpenStack Ironic as part of Metal³. Prior to version capm3-v1.4.3, if Ironic is not deployed with TLS and it does not…