PT-2026-32571

Name of the Vulnerable Software and Affected Versions External Secrets Operator versions prior to 2.3.0 Description The v2 template engine in runtime/template/v2/template.go removes env and expandenv from TxtFuncMap but leaves the getHostByName function accessible to user-controlled templates...

CVE-2026-22822 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

GHSA-77V3-R3JW-J2V2 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: kube-arangodb, kubescape, harbor, helm-push, cerbos, pluto, trivy, headlamp, tw, tigera-operator, flux-source-controller, chart-testing, zot, helm-mapkubeapis, k8ssandra-client, trivy-operator, chartmuseum, eksctl, helm-operator, nova, cert-manager-cmctl, linkerd2,...

CVE-2026-35206 vulnerabilities

Vulnerabilities for packages: kube-arangodb, kubescape, harbor, helm-push, cerbos, pluto, trivy, headlamp, tw, tigera-operator, flux-source-controller, chart-testing, zot, helm-mapkubeapis, k8ssandra-client, trivy-operator, chartmuseum, eksctl, helm-operator, nova, cert-manager-cmctl, linkerd2,...

CVE-2026-22822 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

GHSA-77V3-R3JW-J2V2 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: cerbos, cloudbeat, trivy, kubescape-server-fips, kots, rancher-fleet-fips, harbor, chart-testing, chartmuseum, cert-manager-cmctl, consul-k8s-fips, helm-diff-fips, flux-source-controller-fips, helm-mapkubeapis, kubescape, linkerd2, tw, tigera-operator-fips, helm-push...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: newrelic-k8s-metadata-injection, oras, flux-helm-controller, pluto, kubewatch, dbmate, smokescreen, envoy-ratelimit, aws-network-policy-agent, osv-scanner, fluxcd-kustomize-mutating-webhook, volume-modifier-for-k8s, smarter-device-manager, hubble, goreleaser,...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: kubernetes, k3s, kubescape, kaf, kots, runc, aws-flb-cloudwatch, gitlab-kas, cloud-provider-aws, external-dns, k8s-device-plugin, redka, chezmoi, cilium, hubble, kine, prometheus, kube-fluentd-operator, kyverno, datadog-agent, telegraf, zot, argo-cd, aactl,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: timoni, nri-couchbase, vault-env, harbor-scanner-trivy, http-echo, manifest-tool, chezmoi, mods, caddy, wuzz, supercronic, mc, verticadb-operator, gobuster, nri-mongodb, rancher, vault-benchmark, k8sgpt-operator, knative-eventing, terraform-provider-aws,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: kubernetes, timoni, helm, scorecard, vault-env, task, harbor, litestream, runc, opentofu, sftpgo-plugin-pubsub, ko, syft, cloud-provider-aws, volume-modifier-for-k8s, caddy, kubernetes-csi-external-health-monitor, envconsul, boring-registry, kyverno, db-operator,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: timoni, nri-couchbase, vault-env, harbor-scanner-trivy, http-echo, manifest-tool, chezmoi, mods, caddy, wuzz, supercronic, mc, verticadb-operator, gobuster, nri-mongodb, rancher, vault-benchmark, k8sgpt-operator, knative-eventing, terraform-provider-aws,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: kubernetes, timoni, helm, scorecard, vault-env, task, harbor, litestream, runc, opentofu, sftpgo-plugin-pubsub, ko, syft, cloud-provider-aws, volume-modifier-for-k8s, caddy, kubernetes-csi-external-health-monitor, envconsul, boring-registry, kyverno, db-operator,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: timoni, nri-couchbase, vault-env, harbor-scanner-trivy, http-echo, manifest-tool, chezmoi, mods, caddy, wuzz, supercronic, mc, verticadb-operator, gobuster, nri-mongodb, rancher, vault-benchmark, k8sgpt-operator, knative-eventing, terraform-provider-aws,...

CVE-2026-33810 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller, oras-fips, flux-operator, podinfo-fips, smarter-device-manager, flux-image-reflector-controller-fips, atlas-fips, volume-modifier-for-k8s-fips, kubernetes-dashboard-metrics-scraper-fips, commercial-chainloop-cli, flux-helm-controller-fip...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller, oras-fips, flux-operator, podinfo-fips, smarter-device-manager, flux-image-reflector-controller-fips, atlas-fips, volume-modifier-for-k8s-fips, kubernetes-dashboard-metrics-scraper-fips, commercial-chainloop-cli, flux-helm-controller-fip...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: flux-operator, seaweedfs, helm-diff-fips, kubescape, rancher-machine, syft, tigera-operator, flux-helm-controller-fips, gitlab-kas-fips, newrelic-fluent-bit-output, gitlab-operator-fips, cephcsi-fips, kube-mgmt-fips, tekton-pipelines, cilium-envoy-fips, grafana-fips,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: flux-operator, seaweedfs, helm-diff-fips, kubescape, rancher-machine, syft, tigera-operator, flux-helm-controller-fips, gitlab-kas-fips, newrelic-fluent-bit-output, gitlab-operator-fips, cephcsi-fips, kube-mgmt-fips, tekton-pipelines, cilium-envoy-fips, grafana-fips,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: contour, yunikorn-k8shim, authservice-fips, kubescape-operator-fips, seaweedfs, loki-fips, helm-diff-fips, otel-cli, kubescape, external-dns-fips, crossplane-aws-provider, crossplane-provider-aws-ecs, rancher-machine, syft, tigera-operator, dcgm-exporter,...