Important: Red Hat Security Advisory: external secrets operator for Red Hat OpenShift 1.2.1

external secrets operator for Red Hat OpenShift 1.2.1 The External Secrets Operator for Red Hat OpenShift builds on top of Kubernetes, which integrates external secret management systems like AWS Secrets Manager, HashiCorp Vault, Google Secrets Manager, Azure Key Vault, IBM Cloud Secrets Manager,...

GHSA-QC2Q-P7WX-3PX3 vulnerabilities

Vulnerabilities for packages: rancher-agent, flyte, hydra, falco-exporter, cerbos, kubescape-operator, kyverno, dapr, gitlab-pages, calico, tempo, litestream, kuma, datadog-agent, blob-csi, gcp-compute-persistent-disk-csi-driver, external-secrets-operator, kubernetes-csi-external-provisioner,...

CVE-2026-84303 vulnerabilities

Vulnerabilities for packages: rancher-agent, flyte, hydra, falco-exporter, cerbos, kubescape-operator, kyverno, dapr, gitlab-pages, calico, tempo, litestream, kuma, datadog-agent, blob-csi, gcp-compute-persistent-disk-csi-driver, external-secrets-operator, kubernetes-csi-external-provisioner,...

CLEANSTART-2026-BC74118 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

Multiple security vulnerabilities affect the external-secrets-operator package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See...

CLEANSTART-2026-ZD57800 Security fixes in external-secrets-operator 2.9.0-r0

Package external-secrets-operator version 2.9.0-r0 fixes 1 vulnerabilities: ghsa-gcjh-h69q-9w9g...

PT-2026-89977

Package external-secrets-operator version 2.9.0-r0 fixes 1 vulnerabilities: ghsa-gcjh-h69q-9w9g...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: rancher-agent, azure-service-operator, rke2-cloud-provider, cloud-provider-aws, kyverno, rancher-system-agent, openbao, cluster-api-aws-controller, argocd-image-updater, calico, cert-manager, hubble-ui, openfga, kuma, emissary, datadog-agent, apisix-ingress-controlle...

CVE-2026-56862 vulnerabilities

Vulnerabilities for packages: rancher-system-agent, knative-operator, gitness, tfsec, buildah, fscrypt, esbuild, istio, certificate-transparency, grpcurl, nri-haproxy, juicefs-csi-driver, k9s, k8sgpt, temporal, docker-machine-driver-linode, pgpool2exporter, sftpgo-plugin-auth, mattermost,...

GO-2026-6090 vulnerabilities

Vulnerabilities for packages: rancher-system-agent, knative-operator, gitness, tfsec, buildah, fscrypt, esbuild, istio, certificate-transparency, grpcurl, nri-haproxy, juicefs-csi-driver, k9s, k8sgpt, temporal, docker-machine-driver-linode, pgpool2exporter, sftpgo-plugin-auth, mattermost,...

GO-2026-5602 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

GO-2026-5377 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

GO-2026-5723 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

GO-2026-5693 vulnerabilities

Vulnerabilities for packages: grafana-fips, argo-cd-fips, flux-fips, external-secrets-operator-fips, gitlab-rails-ce, gitlab-rails-ce-fips, nemo, terragrunt, kyverno, gitaly, upwind-agent, flux, argo-cd, external-secrets-operator, teleport, guac, grafana, terragrunt-fips...

GO-2026-5014 vulnerabilities

Vulnerabilities for packages: calico-fips, cloudbeat-fips, argocd-image-updater, tigera-operator, elastic-agent-fips, rancher, loki, traefik-fips, spire-server, docker-machine-driver-harvester, zot, osv-scanner, coder, frankenphp-8.5, coder-fips, keda-fips, opentofu-fips, istio,...

GO-2026-4864 vulnerabilities

Vulnerabilities for packages: tigera-operator, aws-flb-kinesis-fips, chezmoi, elastic-agent-fips, coredns-fips, loki, traefik-fips, spire-server, zot, keda-fips, aws-flb-firehose-fips, cloud-provider-azure-fips, opentofu-fips, newrelic-fluent-bit-output-fips, gitaly-fips, istio,...

GO-2026-5377 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

GO-2026-5723 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

GO-2022-0635 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector, loki, external-secrets-operator, zot, kots, mattermost, k3d...

GO-2026-5602 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: wolfictl, rancher-fleet, teleport, flux, cerbos, kubevela, kyverno, grafana-alloy, gitsign, melange, argocd-image-updater, skaffold, tfsec, trivy-operator, steampipe, zarf, chezmoi, apko, external-secrets-operator, gitaly, pulumi-kubernetes-operator, zot, trivy,...