47 matches found
CVE-2026-108728
Flyte 2.0.1 through 2.0.51 contains a cleartext secret storage vulnerability that allows users with Pod read access to obtain secrets by reading init container environment variables. The embedded secret manager webhook writes base64-encoded FILE-mounted secret values into the SECRETS environment...
EUVD-2026-96894
Flyte 2.0.1 through 2.0.51 contains a cleartext secret storage vulnerability that allows users with Pod read access to obtain secrets by reading init container environment variables. The embedded secret manager webhook writes base64-encoded FILE-mounted secret values into the SECRETS environment...
CVE-2026-108728 Flyte 2.0.1 through 2.0.51 Cleartext Secret Exposure via Admission Webhook
Flyte 2.0.1 through 2.0.51 contains a cleartext secret storage vulnerability that allows users with Pod read access to obtain secrets by reading init container environment variables. The embedded secret manager webhook writes base64-encoded FILE-mounted secret values into the SECRETS environment...
CVE-2026-108728
Flyte versions 2.0.1 through 2.0.51 are vulnerable to a cleartext secret exposure vulnerability within the embedded secret manager webhook . The root cause is that the webhook writes base64-encoded FILE-mounted secret values into the SECRETS environment variable . This allows users with Pod read ...
CVE-2026-108728 Flyte 2.0.1 through 2.0.51 Cleartext Secret Exposure via Admission Webhook
Flyte 2.0.1 through 2.0.51 contains a cleartext secret storage vulnerability that allows users with Pod read access to obtain secrets by reading init container environment variables. The embedded secret manager webhook writes base64-encoded FILE-mounted secret values into the SECRETS environment...
CVE-2026-108728: Cleartext Storage of Sensitive Information
Flyte 2.0.1 through 2.0.51 contains a cleartext secret storage vulnerability that allows users with Pod read access to obtain secrets by reading init container environment variables. The embedded secret manager webhook writes base64-encoded FILE-mounted secret values into the SECRETS environment...
PT-2026-110131
Name of the Vulnerable Software and Affected Versions Flyte versions 2.0.1 through 2.0.51 Description An issue exists where secrets are stored in cleartext, allowing users with Pod read access to obtain sensitive information by reading init container environment variables. The embedded secret...
GO-2026-4740 vulnerabilities
Vulnerabilities for packages: flyte...
GO-2026-4513 vulnerabilities
Vulnerabilities for packages: flyte...
GO-2026-4513 vulnerabilities
Vulnerabilities for packages: flyte...
GO-2026-4740 vulnerabilities
Vulnerabilities for packages: flyte...
GO-2024-2918 vulnerabilities
Vulnerabilities for packages: bank-vaults, chezmoi, fulcio, sigstore-scaffolding, argo-workflows, zot, hugo, spire-server, k8sgpt, restic, rook, zarf, flux-source-controller, buildkitd, rekor, falcoctl, py3-azure-identity, trivy, timestamp-authority, prometheus-operator, tkn, velero,...
GHSA-H524-452V-82P9 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-sns, nri-kubernetes, sealed-secrets, karpenter, rancher-helm, aws-efs-csi-driver, aactl, multus-cni, cass-operator, libnvidia-container, haproxy-ingress, grafana-alloy, crossplane-provider-azure-sql, crossplane-provider-aws-rds, helm-push,...
CVE-2026-42504 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-sns, nri-kubernetes, sealed-secrets, karpenter, rancher-helm, aws-efs-csi-driver, aactl, multus-cni, cass-operator, libnvidia-container, haproxy-ingress, grafana-alloy, crossplane-provider-azure-sql, crossplane-provider-aws-rds, helm-push,...
GHSA-4279-Q6MJ-392R vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-sns, nri-kubernetes, sealed-secrets, karpenter, podinfo, nri-redis, rancher-helm, aws-efs-csi-driver, aactl, multus-cni, temporal-server, cass-operator, continuity, libnvidia-container, haproxy-ingress, azcopy,...
CVE-2026-42507 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-sns, nri-kubernetes, sealed-secrets, karpenter, podinfo, rancher-helm, aws-efs-csi-driver, aactl, multus-cni, temporal-server, cass-operator, continuity, libnvidia-container, haproxy-ingress, azcopy, kube-logging-operator-custom-runner, glab,...
CVE-2026-27145 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-sns, nri-kubernetes, sealed-secrets, karpenter, podinfo, nri-redis, rancher-helm, aws-efs-csi-driver, aactl, multus-cni, temporal-server, cass-operator, continuity, libnvidia-container, haproxy-ingress, azcopy,...
GHSA-H3GM-Q7M7-MP28 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-sns, nri-kubernetes, sealed-secrets, karpenter, podinfo, rancher-helm, aws-efs-csi-driver, aactl, multus-cni, temporal-server, cass-operator, continuity, libnvidia-container, haproxy-ingress, azcopy, kube-logging-operator-custom-runner, glab,...
GHSA-H524-452V-82P9 vulnerabilities
Vulnerabilities for packages: karpenter, crossplane-provider-azure-managedidentity, beats, aws-flb-kinesis-fips, cloud-provider-azure, cluster-api-helm-controller, spark-operator, crossplane-provider-aws-elasticsearch-fips, kyverno-notation-aws-fips, kubevela, metrics-server-fips,...
CVE-2026-42504 vulnerabilities
Vulnerabilities for packages: karpenter, crossplane-provider-azure-managedidentity, beats, aws-flb-kinesis-fips, cloud-provider-azure, cluster-api-helm-controller, spark-operator, crossplane-provider-aws-elasticsearch-fips, kyverno-notation-aws-fips, kubevela, metrics-server-fips,...