Security
فارسی
All products

github.com/external-secrets/external-secrets

Go · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
External Secrets Operator: label enforcement bypass in webhook generator enables secret exfiltrationCVE-2026-26287 · GHSA-Q7HV-XX6H-Q2X8Version ranges need review. github.com/external-secrets/external-secretsExternal Secrets Operator for Red Hat OpenShift/external-secrets-operator/external-secrets-rhel9 GoRed Hat High Fix reported
External Secrets Operator has DNS-based secret exfiltration via getHostByName in External Secrets v2 template engineCVE-2026-34984 · GHSA-R2PG-R6H7-CRF3Version ranges need review. github.com/external-secrets/external-secretsExternal Secrets Operator for Red Hat OpenShift/external-secrets-operator/bitwarden-sdk-server-rhel9 GoRed Hat High Fix reported
External Secrets Operator has Namespace Isolation Bypass in CAProvider ConfigMap Resolution for SecretStoreCVE-2026-42875 · GHSA-WV26-88M5-6H59Version ranges need review. github.com/external-secrets/external-secrets Go Medium Fix reported
External Secrets Operator insecurely retrieves secrets through the getSecretKey templating functionCVE-2026-22822 · GHSA-77V3-R3JW-J2V2Version ranges need review. github.com/external-secrets/external-secretsexternal secrets operator for Red Hat OpenShift - Tech Preview/external-secrets-operator/bitwarden-sdk-server-rhel9 GoRed Hat Critical Fix reported
External Secrets Operator vulnerable to privilege escalationCVE-2024-45041 · GHSA-QWGC-RR35-H4X9Version ranges need review. github.com/external-secrets/external-secrets Go High Fix reported
External Secrets Operator's Missing Namespace Restriction Allows Unauthorized Secret AccessCVE-2025-55196 · GHSA-FCXQ-V2R3-CC8HVersion ranges need review. github.com/external-secrets/external-secrets Go High Fix reported