CVE-2026-25680 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, caddy, vale, mattermost, kubernetes-dashboard, ingress-nginx-controller, step, step-issuer, kubernetes, istio, prometheus, gitea, hydra, telegraf, kyverno, crossplane-provider-aws-elasticache, falco-no-driver, helm, prometheus-operator,...

CVE-2026-25681 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, caddy, vale, mattermost, kubernetes-dashboard, ingress-nginx-controller, step, step-issuer, kubernetes, istio, prometheus, gitea, hydra, telegraf, kyverno, crossplane-provider-aws-elasticache, falco-no-driver, helm, prometheus-operator,...

GHSA-M9X8-M34X-FJ9Q vulnerabilities

Vulnerabilities for packages: external-secrets-operator, caddy, vale, mattermost, kubernetes-dashboard, ingress-nginx-controller, step, step-issuer, kubernetes, istio, prometheus, gitea, hydra, telegraf, kyverno, crossplane-provider-aws-elasticache, falco-no-driver, helm, prometheus-operator,...

CVE-2026-27136 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, caddy, vale, mattermost, kubernetes-dashboard, ingress-nginx-controller, step, step-issuer, kubernetes, istio, prometheus, gitea, hydra, telegraf, kyverno, crossplane-provider-aws-elasticache, falco-no-driver, helm, prometheus-operator,...

CVE-2026-42502 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, caddy, vale, mattermost, kubernetes-dashboard, ingress-nginx-controller, step, step-issuer, kubernetes, istio, prometheus, gitea, hydra, telegraf, kyverno, crossplane-provider-aws-elasticache, falco-no-driver, helm, prometheus-operator,...

CVE-2026-42506 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, caddy, vale, mattermost, kubernetes-dashboard, ingress-nginx-controller, step, step-issuer, kubernetes, istio, prometheus, gitea, hydra, telegraf, kyverno, crossplane-provider-aws-elasticache, falco-no-driver, helm, prometheus-operator,...

GHSA-WRH2-89VG-4J9G vulnerabilities

Vulnerabilities for packages: external-secrets-operator, caddy, vale, mattermost, kubernetes-dashboard, ingress-nginx-controller, step, step-issuer, kubernetes, istio, prometheus, gitea, hydra, telegraf, kyverno, crossplane-provider-aws-elasticache, falco-no-driver, helm, prometheus-operator,...

GHSA-5CV4-JP36-H3MW vulnerabilities

Vulnerabilities for packages: external-secrets-operator, caddy, vale, mattermost, kubernetes-dashboard, ingress-nginx-controller, step, step-issuer, kubernetes, istio, prometheus, gitea, hydra, telegraf, kyverno, crossplane-provider-aws-elasticache, falco-no-driver, helm, prometheus-operator,...

GHSA-W9P8-PVXH-RXPJ vulnerabilities

Vulnerabilities for packages: external-secrets-operator, caddy, vale, mattermost, kubernetes-dashboard, ingress-nginx-controller, step, step-issuer, kubernetes, istio, prometheus, gitea, hydra, telegraf, kyverno, crossplane-provider-aws-elasticache, falco-no-driver, helm, prometheus-operator,...

GHSA-CG87-VWWH-XVGJ vulnerabilities

Vulnerabilities for packages: external-secrets-operator, caddy, vale, mattermost, kubernetes-dashboard, ingress-nginx-controller, step, step-issuer, kubernetes, istio, prometheus, gitea, hydra, telegraf, kyverno, crossplane-provider-aws-elasticache, falco-no-driver, helm, prometheus-operator,...

CVE-2026-45132

CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow generate-schema.yaml exposes sensitive credentials Personal Access Token and SSH signing key to fork-controlled code due to unsafe checkout and credential handling practices. Th...

EUVD-2026-33666

CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow pull-request.yaml executes attacker-controlled code from fork pull requests in a privileged context, exposing repository secrets including Docker Hub credentials and tokens...

CVE-2026-45131 CloudPirates Open Source Helm Charts: GitHub Actions pull_request_target workflow allows secret exfiltration via fork pull requests

CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow pull-request.yaml executes attacker-controlled code from fork pull requests in a privileged context, exposing repository secrets including Docker Hub credentials and tokens...

CVE-2026-45131 CloudPirates Open Source Helm Charts: GitHub Actions pull_request_target workflow allows secret exfiltration via fork pull requests

CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow pull-request.yaml executes attacker-controlled code from fork pull requests in a privileged context, exposing repository secrets including Docker Hub credentials and tokens...

CVE-2026-45132 CloudPirates Open Source Helm Charts: GitHub Actions workflow leaks PAT and SSH signing key via unsafe credential handling

CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow generate-schema.yaml exposes sensitive credentials Personal Access Token and SSH signing key to fork-controlled code due to unsafe checkout and credential handling practices. Th...

CVE-2026-45132 CloudPirates Open Source Helm Charts: GitHub Actions workflow leaks PAT and SSH signing key via unsafe credential handling

CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow generate-schema.yaml exposes sensitive credentials Personal Access Token and SSH signing key to fork-controlled code due to unsafe checkout and credential handling practices. Th...

EUVD-2026-33665

CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow generate-schema.yaml exposes sensitive credentials Personal Access Token and SSH signing key to fork-controlled code due to unsafe checkout and credential handling practices. Th...

CVE-2026-45132 CloudPirates Open Source Helm Charts: GitHub Actions workflow leaks PAT and SSH signing key via unsafe credential handling

CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow generate-schema.yaml exposes sensitive credentials Personal Access Token and SSH signing key to fork-controlled code due to unsafe checkout and credential handling practices. Th...

CVE-2026-45132

CVE-2026-45132 concerns CloudPirates Open Source Helm Charts. Prior to commit fcf9302, a GitHub Actions workflow (generate-schema.yaml) exposed sensitive credentials—Personal Access Token and an SSH signing key —to fork-controlled code due to unsafe checkout and credential handling practices. The...

SUSE-SU-2026:21881-1 Security update for helm

This update for helm fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1265758. - CVE-2026-41888: github.com/distribution/distribution/v3: tag deletion bypasses the storage.delete.enabled configuration...