CVE-2026-22822 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

GHSA-77V3-R3JW-J2V2 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

CVE-2026-22822 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

GHSA-77V3-R3JW-J2V2 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: grafana-fips, kubevela, pulumi-kubernetes-operator, pulumi, xeol, packer-fips, trivy-fips, pulumi-language-dotnet, pulumi-language-java, argocd-image-updater-fips, src-fingerprint, gitaly, external-secrets-operator-fips, gitlab-runner-fips, xeol-fips, cerbos,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: grafana-fips, kubevela, pulumi-kubernetes-operator, pulumi, xeol, packer-fips, trivy-fips, pulumi-language-dotnet, pulumi-language-java, argocd-image-updater-fips, src-fingerprint, gitaly, external-secrets-operator-fips, gitlab-runner-fips, xeol-fips, cerbos,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: gitsign, pulumi-language-java, dagger, zarf, trufflehog, gitea, argo-workflows, flux-source-controller, nuclei, kots, melange, osv-scanner, kubescape, scorecard, apko, gitlab-runner, gptscript, syft, gomplate, pulumi-language-dotnet, argo-events, crossplane, kargo,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: gitsign, pulumi-language-java, dagger, zarf, trufflehog, gitea, argo-workflows, flux-source-controller, nuclei, kots, melange, osv-scanner, kubescape, scorecard, apko, gitlab-runner, gptscript, syft, gomplate, pulumi-language-dotnet, argo-events, crossplane, kargo,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: gitsign, pulumi-language-java, dagger, zarf, trufflehog, gitea, argo-workflows, flux-source-controller, nuclei, kots, melange, osv-scanner, kubescape, scorecard, apko, gitlab-runner, gptscript, syft, gomplate, pulumi-language-dotnet, argo-events, crossplane, kargo,...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: gitsign, pulumi-language-java, dagger, zarf, trufflehog, gitea, argo-workflows, flux-source-controller, nuclei, kots, melange, osv-scanner, kubescape, scorecard, apko, gitlab-runner, gptscript, syft, gomplate, pulumi-language-dotnet, argo-events, crossplane, kargo,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: gitsign, pulumi-language-java, vcluster, trufflehog, datadog-agent, crossplane-provider-aws-cloudfront, argo-workflows, trivy, kots, kubescape, scorecard, docker-cli-buildx, gptscript, gomplate, crossplane-provider-aws-dynamodb, crossplane-provider-aws-sns,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: gitsign, pulumi-language-java, vcluster, trufflehog, datadog-agent, crossplane-provider-aws-cloudfront, argo-workflows, trivy, kots, kubescape, scorecard, docker-cli-buildx, gptscript, gomplate, crossplane-provider-aws-dynamodb, crossplane-provider-aws-sns,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: terraform-provider-pagerduty-fips, databricks-cli, crossplane-provider-aws-route53-fips, grafana-fips, kubevela, crossplane-provider-aws-ecr-fips, datadog-agent, pulumi, pulumi-kubernetes-operator, helm-diff, sops-fips, docker-cli-buildx,...

SUSE CVE-2026-22822

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. Starting in version 0.20.2 and prior to version 1.2.0, the getSecretKey template function, while introduced for senhasegura Devops Secrets Management DSM provider, ha...

GO-2026-4330 External Secrets Operator insecurely retrieves secrets through the getSecretKey templating function in github.com/external-secrets/external-secrets

External Secrets Operator insecurely retrieves secrets through the getSecretKey templating function in github.com/external-secrets/external-secrets...

PT-2026-6506

External Secrets Operator insecurely retrieves secrets through the getSecretKey templating function in github.com/external-secrets/external-secrets...

CVE-2026-22822

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. Starting in version 0.20.2 and prior to version 1.2.0, the getSecretKey template function, while introduced for senhasegura Devops Secrets Management DSM provider, ha...

CVE-2026-22822 External Secrets Operator insecurely retrieves secrets through the getSecretKey templating function

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. Starting in version 0.20.2 and prior to version 1.2.0, the getSecretKey template function, while introduced for senhasegura Devops Secrets Management DSM provider, ha...

CVE-2026-22822

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. Starting in version 0.20.2 and prior to version 1.2.0, the getSecretKey template function, while introduced for senhasegura Devops Secrets Management DSM provider, ha...

CVE-2026-22822 External Secrets Operator insecurely retrieves secrets through the getSecretKey templating function

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. Starting in version 0.20.2 and prior to version 1.2.0, the getSecretKey template function, while introduced for senhasegura Devops Secrets Management DSM provider, ha...