cottage

cott age — это GitOps-инструмент для команд, позволяющий управлять секретами, зашифрованными с помощью age, в git-репозиториях. Он предоставляет простой рабочий процесс для шифрования/расшифровки секретов, управления получателями и хранения секретов вне репозитория, при этом обеспечивая удобный...

vault

Vault Please note : We take Vault's security and our users' trust very seriously. If you believe you have found a security issue in Vault, please responsibly disclose by contacting us at [email protected]. Website: developer.hashicorp.com/vault Announcement list: Google Groups Discussion...

wrongsecrets

OWASP WrongSecrets Bienvenue dans le jeu OWASP WrongSecrets ! Ce jeu regorge d'exemples concrets de la manière de ne pas stocker vos secrets dans vos logiciels. Chacun de ces exemples est présenté sous forme de défi que vous devez résoudre à l'aide de divers outils et techniques. Résoudre ces déf...

envsec

envsec Безопасное управление секретами окружения с использованием встроенных хранилищ учетных данных ОС. Демо Возможности Хранение секретов во встроенном хранилище учетных данных ОС не в текстовых файлах Кроссплатформенность: macOS, Linux, Windows Организация секретов по контекстам например,...

conjur

Conjur Maintainability Test Coverage Conjur предоставляет управление секретами и идентификацией приложений для современной инфраструктуры: Язык разметки авторизации машин "MAML" — язык политик доступа на основе ролей для определения системных компонентов и их ролей, привилегий и метаданных...

CVE-2026-55775

OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, OpenBao users granted capabilities on /sys/namespaces/root within a non-root namespace could exploit special handling of the literal root path in namespace canonicalization. The /sys/namespaces/ endpoint family ca...

CVE-2026-55776

OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, an authenticated OpenBao caller with write access to transit/keys/ could terminate the server process by setting derived to true while the type parameter selected rsa-, ecdsa-, or ed25519. The Transit policy...

CVE-2026-55774

OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, an OpenBao user with access to sys/leases/revoke/:leaseid in one namespace could revoke a lease in another namespace when the foreign leaseid was known, bypassing namespace ACL isolation. The affected lease lookup...

CVE-2026-55770

OpenBao , an open source identity-based secrets management system, contains an LDAP injection flaw in sdk/helper/ldaputil/client.go (GetUserDN). Prior to 2.5.5 , the function used EscapeLDAPValue (an RFC 4514 distinguished-name escaper) where RFC 4515 LDAP search-filter escaping (ldap.EscapeFilte...

CVE-2026-55775

OpenBao is an open-source identity-based secrets management system. Prior to 2.5.5 , users granted capabilities on /sys/namespaces/root within a non-root namespace could exploit a flaw in namespace path canonicalization . Because ACL checks occurred before the literal root path was canonicalized ...

CVE-2026-55775 OpenBao's System Backend allows Unauthorized Management of the containing Namespace

OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, OpenBao users granted capabilities on /sys/namespaces/root within a non-root namespace could exploit special handling of the literal root path in namespace canonicalization. The /sys/namespaces/ endpoint family ca...

EUVD-2026-78680

OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, OpenBao users granted capabilities on /sys/namespaces/root within a non-root namespace could exploit special handling of the literal root path in namespace canonicalization. The /sys/namespaces/ endpoint family ca...

GO-2024-2982 vulnerabilities

Vulnerabilities for packages: vault...

GO-2026-5377 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

GO-2026-5723 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

GO-2026-5426 vulnerabilities

Vulnerabilities for packages: snyk-cli, kuberay-operator, grafana-mimir, docker-cli-buildx, secrets-store-csi-driver-provider-azure, cloud-provider-vsphere, containerd, kubernetes-csi-external-attacher, hydra, redpanda, gitlab-runner, terraform-provider-google, docker-compose,...

GO-2025-3553 vulnerabilities

Vulnerabilities for packages: grafana-mimir, secrets-store-csi-driver-provider-azure, hydra, k8sgpt, git-sync, crossplane-provider-family-azure, flux, sftpgo-plugin-pubsub, opentelemetry-collector, rclone, dgraph, falcoctl, kots, policy-controller, docker, weaviate, wal-g, cosign,...

Important: Red Hat Security Advisory: external secrets operator for Red Hat OpenShift 1.1.1

external secrets operator for Red Hat OpenShift 1.1.1 The External Secrets Operator for Red Hat OpenShift builds on top of Kubernetes, which integrates external secret management systems like AWS Secrets Manager, HashiCorp Vault, Google Secrets Manager, Azure Key Vault, IBM Cloud Secrets Manager,...

BIT-OPENBAO-2026-40264 OpenBao's Token Store Allows Cross-Namespace Renewal, Revocation

OpenBao is an open source identity-based secrets management system. OpenBao's namespaces provide multi-tenant separation. Prior to version 2.5.3, a tenant who leaks token accessors can have their token revoked or renewed by a privileged administrator in another tenant. This is addressed in v2.5.3...

[SECURITY] Fedora 43 Update: openbao-2.5.4-1.fc43

Openbao secures, stores, and tightly controls access to tokens, passwords, certificates, API keys, and other secrets in modern computing. Openbao handles leasing, key revocation, key rolling, and auditing. Through a unified API, us ers can access an encrypted Key/Value store and network...