520 matches found
CLEANSTART-2026-SI61091 Security fixes in openbao 2.5.5-r1
Package openbao version 2.5.5-r1 fixes 4 vulnerabilities: ghsa-gcjh-h69q-9w9g, CVE-2026-46600, CVE-2026-56852, ghsa-hrxh-6v49-42gf...
GHSA-HFG8-HC9C-6C3H vulnerabilities
Vulnerabilities for packages: falcoctl, docker-cli-buildx, buildkitd, kaniko, podman, telegraf, kubescape, skaffold, openbao, buildah...
CVE-2026-17106 vulnerabilities
Vulnerabilities for packages: falcoctl, docker-cli-buildx, buildkitd, kaniko, podman, telegraf, kubescape, skaffold, openbao, buildah...
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: emissary, helm-operator, kubescape, crossplane, rke2-cloud-provider, metallb, cluster-api-helm-controller, zot, kyverno-notation-aws, gatekeeper, kube-state-metrics, kubescape-operator, rancher-system-agent, cluster-api-gcp-controller, openbao, yunikorn-k8shim,...
CVE-2026-17106 vulnerabilities
Vulnerabilities for packages: skaffold, buildah, docker-cli-buildx, openbao, ctop-fips, kubescape-server, buildkitd-fips, falcoctl-fips, podman, falcoctl, docker-cli-buildx-fips, kubescape-server-fips, podman-fips, openbao-fips, skaffold-fips, buildah-fips, kaniko-fips, buildkitd, docker-fips,...
GHSA-HFG8-HC9C-6C3H vulnerabilities
Vulnerabilities for packages: skaffold, buildah, docker-cli-buildx, openbao, ctop-fips, kubescape-server, buildkitd-fips, falcoctl-fips, podman, falcoctl, docker-cli-buildx-fips, kubescape-server-fips, podman-fips, openbao-fips, skaffold-fips, buildah-fips, kaniko-fips, buildkitd, docker-fips,...
BIT-OPENBAO-2026-46405 OpenBao's Kerberos Auth Method Accumulates Unaccessible Tokens
OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, in OpenBao's Kerberos auth method on the GET handler, or when an Authorization: Negotiate header is supplied, the response is includes a logical.Auth object in addition to an error message. This results in...
BIT-OPENBAO-2026-46358 OpenBao's Inline Auth Incorrectly Redacted Headers
OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, OpenBao's inline auth functionality incorrectly redacted audit log entries, resulting in non-auth headers being removed and auth-related headers being retained in cleartext. This requires an attacker to...
BIT-OPENBAO-2026-45808 OpenBao's cross-namespace lease revocation via legacy sys/revoke path bypasses ACL
OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, OpenBao's namespaces provide multi-tenant separation. A tenant who intentionally leaks lease identifiers can have their lease and underlying credential revoked or renewed by a user in another tenant via th...
CVE-2026-46405
A flaw was found in OpenBao, an identity-based secrets management system. When the Kerberos authentication method processes a GET request or an Authorization: Negotiate header, it inadvertently creates authentication tokens that are not accessible to the caller and are hidden by an error message...
GO-2026-5213 vulnerabilities
Vulnerabilities for packages: openbao...
GO-2026-5526 vulnerabilities
Vulnerabilities for packages: openbao...
GO-2026-5192 vulnerabilities
Vulnerabilities for packages: openbao...
GO-2026-5609 vulnerabilities
Vulnerabilities for packages: openbao...
GO-2026-5192 vulnerabilities
Vulnerabilities for packages: openbao...
GO-2026-5609 vulnerabilities
Vulnerabilities for packages: openbao...
GO-2026-5213 vulnerabilities
Vulnerabilities for packages: openbao...
GO-2026-5526 vulnerabilities
Vulnerabilities for packages: openbao...
GO-2026-4340 vulnerabilities
Vulnerabilities for packages: pgpool2exporter, chisel, restic, timescaledb-parallel-copy, runc, docker-credential-ecr-login, yace, conftest, dockerize, nri-redis, kine, helm-operator, helm-set-status, crossplane-provider-aws-lambda, opensearch-k8s-operator, azure-workload-identity-webhook, flanne...
CVE-2026-46358
A flaw was found in OpenBao. The inline authentication functionality incorrectly redacted audit log entries, causing non-authentication headers to be removed while authentication-related headers were retained in cleartext. This vulnerability requires an attacker to first compromise access to the...