conjur

Conjur Maintainability Test Coverage Conjur provides secrets management and application identity for modern infrastructure: Machine Authorization Markup Language "MAML" , a role-based access policy language to define system components & their roles, privileges and metadata A REST web service to:...

CVE-2026-45165

An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch. Under specific circumstances, an attacker could potentially leverage this to retrieve unauthorized secrets, alter administrative access...

CVE-2026-45165 Idira Secrets Manager (Self-Hosted): Improper Authorization in REST API

An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch. Under specific circumstances, an attacker could potentially leverage this to retrieve unauthorized secrets, alter administrative access...

CVE-2026-45165 Idira Secrets Manager (Self-Hosted): Improper Authorization in REST API

An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch. Under specific circumstances, an attacker could potentially leverage this to retrieve unauthorized secrets, alter administrative access...

CVE-2026-45165

An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch . Exploitation of this flaw could allow an attacker to retrieve unauthorized secrets , modify administrative access controls on the branch, ...

EUVD-2026-102300

An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch. Under specific circumstances, an attacker could potentially leverage this to retrieve unauthorized secrets, alter administrative access...

CVE-2026-45165: Incorrect Authorization

An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch. Under specific circumstances, an attacker could potentially leverage this to retrieve unauthorized secrets, alter administrative access...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: pulumi-language-java, kiali, gke-gcloud-auth-plugin, grafana-mimir, gatus, bank-vaults, grafana-alloy, cluster-api, knative-serving, argo-events, istio, addon-resizer, kots, crossplane-provider-azure-managedidentity, karpenter, terraform-provider-acme,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: whereabouts, gke-gcloud-auth-plugin, sriov-network-device-plugin, gatus, bank-vaults, step, aws-eks-pod-identity-agent, kube-vip-cloud-provider, gitness, pguser, kserve-modelmesh-serving, kube-logging-operator-custom-runner, dbmate, nri-redis, ratify, ksops,...

CVE-2022-23116

Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements functionality that allows attackers able to control agent processes to decrypt secrets stored in Jenkins obtained through another method...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: whereabouts, gke-gcloud-auth-plugin, nodetaint, custom-pod-autoscaler-operator, sriov-network-device-plugin, trillian, kube-rbac-proxy, logstash-exporter, kubecolor, kube-vip-cloud-provider, istio, velero-plugin-for-microsoft-azure, pguser,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: whereabouts, gke-gcloud-auth-plugin, nodetaint, custom-pod-autoscaler-operator, sriov-network-device-plugin, trillian, kube-rbac-proxy, logstash-exporter, kubecolor, kube-vip-cloud-provider, istio, velero-plugin-for-microsoft-azure, pguser,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: whereabouts, gke-gcloud-auth-plugin, nodetaint, custom-pod-autoscaler-operator, sriov-network-device-plugin, trillian, kube-rbac-proxy, logstash-exporter, kubecolor, kube-vip-cloud-provider, istio, velero-plugin-for-microsoft-azure, pguser,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: whereabouts, gke-gcloud-auth-plugin, nodetaint, custom-pod-autoscaler-operator, sriov-network-device-plugin, trillian, kube-rbac-proxy, logstash-exporter, kubecolor, kube-vip-cloud-provider, istio, velero-plugin-for-microsoft-azure, pguser,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: whereabouts, sriov-network-device-plugin, custom-pod-autoscaler-operator, trillian, kube-rbac-proxy, logstash-exporter, kubecolor, kube-vip-cloud-provider, istio, velero-plugin-for-microsoft-azure, pguser, kube-logging-operator-custom-runner, certificate-transparency...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: whereabouts, gke-gcloud-auth-plugin, nodetaint, custom-pod-autoscaler-operator, sriov-network-device-plugin, trillian, kube-rbac-proxy, logstash-exporter, kubecolor, kube-vip-cloud-provider, istio, velero-plugin-for-microsoft-azure, pguser,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: whereabouts, gke-gcloud-auth-plugin, nodetaint, custom-pod-autoscaler-operator, sriov-network-device-plugin, trillian, kube-rbac-proxy, logstash-exporter, kubecolor, kube-vip-cloud-provider, istio, velero-plugin-for-microsoft-azure, pguser,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: whereabouts, gke-gcloud-auth-plugin, nodetaint, custom-pod-autoscaler-operator, sriov-network-device-plugin, trillian, kube-rbac-proxy, logstash-exporter, kubecolor, kube-vip-cloud-provider, istio, velero-plugin-for-microsoft-azure, pguser,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: whereabouts, gke-gcloud-auth-plugin, nodetaint, custom-pod-autoscaler-operator, sriov-network-device-plugin, trillian, kube-rbac-proxy, logstash-exporter, kubecolor, kube-vip-cloud-provider, istio, velero-plugin-for-microsoft-azure, pguser,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: whereabouts, gke-gcloud-auth-plugin, nodetaint, custom-pod-autoscaler-operator, sriov-network-device-plugin, trillian, kube-rbac-proxy, logstash-exporter, kubecolor, kube-vip-cloud-provider, istio, velero-plugin-for-microsoft-azure, pguser,...