clastix kamaji

• CVE-2026-62845 Medium 4.7 Kamaji: SQL injection via unescaped datastore identifiers in PostgreSQL/MySQL drivers 0.3%
• CVE-2026-62246 High 8.5 Kamaji: TenantControlPlane namespace/name collision binds two tenants to the same SQL datastore schema + DB user, breaking per-tenant isolation 0.4%
• CVE-2024-42480 High 8.1 Kamaji's RBAC Roles for `etcd` are not disjunct 0.6%