conjur

Conjur Maintainability Test Coverage Conjur provides secrets management and application identity for modern infrastructure: Machine Authorization Markup Language "MAML" , a role-based access policy language to define system components & their roles, privileges and metadata A REST web service to:...

CVE-2026-45165

An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch. Under specific circumstances, an attacker could potentially leverage this to retrieve unauthorized secrets, alter administrative access...

EUVD-2026-102300

An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch. Under specific circumstances, an attacker could potentially leverage this to retrieve unauthorized secrets, alter administrative access...

CVE-2026-45165 Idira Secrets Manager (Self-Hosted): Improper Authorization in REST API

An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch. Under specific circumstances, an attacker could potentially leverage this to retrieve unauthorized secrets, alter administrative access...

CVE-2026-45165 Idira Secrets Manager (Self-Hosted): Improper Authorization in REST API

An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch. Under specific circumstances, an attacker could potentially leverage this to retrieve unauthorized secrets, alter administrative access...

CVE-2026-45165

An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch . Exploitation of this flaw could allow an attacker to retrieve unauthorized secrets , modify administrative access controls on the branch, ...

CVE-2026-45165: Incorrect Authorization

An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch. Under specific circumstances, an attacker could potentially leverage this to retrieve unauthorized secrets, alter administrative access...

PT-2026-115215

An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch. Under specific circumstances, an attacker could potentially leverage this to retrieve unauthorized secrets, alter administrative access...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: steampipe, pinact, crossplane-provider-aws-rds, cass-operator, azcopy, grafana-operator, runc, src, terraform-provider-acme, cluster-autoscaler, knative-serving, crossplane-provider-azure-sql, aws-flb-cloudwatch, tekton-chains, stakater-reloader, temporal-server,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: steampipe, terraform-provider-time, ipfs-cluster, whereabouts, crossplane-provider-aws-rds, cass-operator, azcopy, cert-manager-cmctl, doppler-kubernetes-operator, grafana-operator, langfuse, runc, src, minio-operator, crossplane-provider-azure-sql, aws-flb-cloudwatc...

CVE-2022-23116

Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements functionality that allows attackers able to control agent processes to decrypt secrets stored in Jenkins obtained through another method...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: hello-world-golang, oauth2-proxy, terraform-provider-time, ipfs-cluster, distribution, whereabouts, cert-manager-cmctl, doppler-kubernetes-operator, runc, go-bindata, stakater-reloader, juicefs, docker-machine-driver-harvester, falco-exporter, smarter-device-manager,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: hello-world-golang, oauth2-proxy, terraform-provider-time, ipfs-cluster, distribution, whereabouts, cert-manager-cmctl, doppler-kubernetes-operator, runc, go-bindata, stakater-reloader, juicefs, docker-machine-driver-harvester, falco-exporter, smarter-device-manager,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: hello-world-golang, oauth2-proxy, terraform-provider-time, ipfs-cluster, distribution, whereabouts, cert-manager-cmctl, doppler-kubernetes-operator, runc, go-bindata, stakater-reloader, juicefs, docker-machine-driver-harvester, falco-exporter, smarter-device-manager,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: hello-world-golang, oauth2-proxy, terraform-provider-time, ipfs-cluster, distribution, whereabouts, cert-manager-cmctl, doppler-kubernetes-operator, runc, go-bindata, stakater-reloader, juicefs, docker-machine-driver-harvester, falco-exporter, smarter-device-manager,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: hello-world-golang, oauth2-proxy, terraform-provider-time, ipfs-cluster, distribution, whereabouts, cert-manager-cmctl, doppler-kubernetes-operator, runc, go-bindata, stakater-reloader, juicefs, docker-machine-driver-harvester, falco-exporter, grpcurl,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: hello-world-golang, oauth2-proxy, terraform-provider-time, ipfs-cluster, distribution, whereabouts, cert-manager-cmctl, doppler-kubernetes-operator, runc, go-bindata, stakater-reloader, juicefs, docker-machine-driver-harvester, falco-exporter, smarter-device-manager,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: hello-world-golang, oauth2-proxy, terraform-provider-time, ipfs-cluster, distribution, whereabouts, cert-manager-cmctl, doppler-kubernetes-operator, runc, go-bindata, stakater-reloader, juicefs, docker-machine-driver-harvester, falco-exporter, smarter-device-manager,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: hello-world-golang, oauth2-proxy, terraform-provider-time, ipfs-cluster, distribution, whereabouts, cert-manager-cmctl, doppler-kubernetes-operator, runc, go-bindata, stakater-reloader, juicefs, docker-machine-driver-harvester, falco-exporter, smarter-device-manager,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: runc, go-bindata, juicefs, grpcurl, etcd, kubernetes-replicator, kuberlr, direnv, cri-tools, opensearch-k8s-operator, gotestsum, jitsucom-bulker, secrets-store-csi-driver-provider-aws, go-tools, ghaudit, nerdctl, hey, terraform, incert, kafkaexporter, harbor-registry...