CVE-2026-45131

creationtimestamp| type| source ---|---|--- 2026-09-07 17:00:03+00:00| seen| Telegram/mZYFClG86N2uRlo6VPTNnCiOHCdpbF3LICWWF8RMH3DCu8Q 2026-09-08 00:00:38+00:00| published-proof-of-concept| Telegram/mZYFClG86N2uRlo6VPTNnCiOHCdpbF3LICWWF8RMH3DCu8Q...

CVE-2026-45131

CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow pull-request.yaml executes attacker-controlled code from fork pull requests in a privileged context, exposing repository secrets including Docker Hub credentials and tokens...

CVE-2026-45131

CloudPirates Open Source Helm Charts are affected by a vulnerability in the GitHub Actions pull-request.yaml workflow where attacker-controlled code from fork pull requests could run in a privileged context, exposing repository secrets (e.g., Docker Hub credentials/tokens). The issue precedes com...

CVE-2026-45131 CloudPirates Open Source Helm Charts: GitHub Actions pull_request_target workflow allows secret exfiltration via fork pull requests

CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow pull-request.yaml executes attacker-controlled code from fork pull requests in a privileged context, exposing repository secrets including Docker Hub credentials and tokens...