GO-2026-5014 vulnerabilities

Vulnerabilities for packages: k9s, harbor-fips, omnictl-multiarch, kube-arangodb-fips, gitlab-rails-ce, kube-state-metrics, argocd-image-updater-fips, reports-server, rancher, loki, zot, argo-cd-fips, helm, falco-no-driver, zarf, backup-restore-operator, etcd-fips, kuma, argocd-image-updater,...

GO-2026-4864 vulnerabilities

Vulnerabilities for packages: harbor-fips, gitaly, kube-arangodb-fips, gitlab-rails-ce, kube-state-metrics, rke2-runtime, coredns, loki, zot, argo-cd-fips, helm, falco-no-driver, ingress-nginx-controller, beats, cert-manager-fips, fuse-overlayfs-snapshotter, net-kourier-fips,...

GO-2025-3553 vulnerabilities

Vulnerabilities for packages: azcopy, harbor-fips, ko-fips, splunk-otel-collector, tekton-chains, rclone, argocd-image-updater-fips, openfga-fips, crossplane, crossplane-provider-azure-authorization, hydra-fips, xeol-fips, rancher, loki, restic, sqlexporter, argo-cd-fips,...

GO-2022-0635 vulnerabilities

Vulnerabilities for packages: mattermost, k3d, external-secrets-operator, zot, opentelemetry-collector, kots, loki...

GO-2026-5602 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

GO-2022-0646 vulnerabilities

Vulnerabilities for packages: mattermost, k3d, external-secrets-operator, zot, opentelemetry-collector, kots, loki...

GO-2026-5377 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

GO-2026-5723 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: gitea, dagger, kubescape, kubevela, grafana-alloy, scorecard, tfsec, cerbos, argo-cd, src-fingerprint, chezmoi, flux, gitsign, gptscript, teleport, osv-scanner, syft, gitlab-runner, argo-events, kyverno, pulumi-language-yaml, trivy, trufflehog, steampipe, wolfictl,...

GO-2026-5490 vulnerabilities

Vulnerabilities for packages: argo-cd, telegraf, flux, teleport, external-secrets-operator, syft, kyverno, gitaly, terragrunt, scorecard, rancher-fleet, rclone, cerbos...

GO-2026-5597 vulnerabilities

Vulnerabilities for packages: argo-cd, teleport, external-secrets-operator, syft, kyverno, gitaly, terragrunt, scorecard, rancher-fleet, rclone, cerbos...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: gitea, hcloud, crossplane-provider-aws-elasticache, datadog-agent, crossplane-provider-aws-sns, nerdctl, ko, cilium, kubescape, opentelemetry-collector, kaf, crossplane-provider-aws-route53, flux-notification-controller, crossplane-provider-aws-rds, chezmoi, cosign,...

CLEANSTART-2026-AP22557 Security fixes in external-secrets-fips 2.7.0-r1

Package external-secrets-fips version 2.7.0-r1 fixes 5 vulnerabilities: CVE-2026-2303, ghsa-cp6g-7hqx-qxhp, ghsa-hrxh-6v49-42gf, ghsa-gcjh-h69q-9w9g, ghsa-mpwr-8vm7-h73f...

Important: Red Hat Security Advisory: external secrets operator for Red Hat OpenShift 1.1.1

external secrets operator for Red Hat OpenShift 1.1.1 The External Secrets Operator for Red Hat OpenShift builds on top of Kubernetes, which integrates external secret management systems like AWS Secrets Manager, HashiCorp Vault, Google Secrets Manager, Azure Key Vault, IBM Cloud Secrets Manager,...

SUSE CVE-2026-34984

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. Versions 2.2.0 and below contain a vulnerability in runtime/template/v2/template.go where the v2 template engine removes env and expandenv from Sprig's TxtFuncMap but...

SUSE CVE-2026-42875

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. Prior to 2.4.0, Namespaced SecretStore resources that used CAProvider with type ConfigMap could resolve CA material from another namespace when caProvider.namespace w...

SUSE CVE-2026-42876

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. Prior to 2.4.1, a user who only has permission to create ExternalSecret resources can cause the operator to create a Secret that Kubernetes will automatically populat...

CLEANSTART-2026-SQ12998 Security fixes in external-secrets 1.1.0-r0

Package external-secrets version 1.1.0-r0 fixes 1 vulnerabilities: CVE-2025-61729...

CLEANSTART-2026-LB77178 Security fixes in external-secrets-operator 2.7.0-r1

Package external-secrets-operator version 2.7.0-r1 fixes 4 vulnerabilities: CVE-2026-46600, CVE-2026-56852, CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-BA39475 Security fixes in external-secrets-fips 0.17.0-r2

Package external-secrets-fips version 0.17.0-r2 fixes 75 vulnerabilities: CVE-2026-39820, CVE-2026-25679, CVE-2025-61726, CVE-2026-27143, CVE-2025-68121...