github.com/bank-vaults/vault-secrets-webhook
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| vault-addr annotation SSRF -- webhook makes outbound HTTP call to attacker URL during admission; vault-serviceaccount enables cluster-wide SA token theft via TokenRequest API | github.com/bank-vaults/vault-secrets-webhook | Go | Critical | Fix reported |