1843 matches found
CVE-2026-67349
OpenCost before 1.121.0 is vulnerable. The GET /helmValues endpoint does not require authentication, exposing a base64-decoded HELM_VALUES containing cloud provider credentials. Additionally, adminAuthMiddleware is permissive when ADMIN_TOKEN is unset, allowing unauthenticated POST /serviceKey to...
CVE-2026-67349
OpenCost before 1.121.0 fails to authenticate the GET /helmValues endpoint, exposing base64-decoded HELMVALUES environment variable containing cloud provider credentials. Additionally, adminAuthMiddleware fails open when ADMINTOKEN is unset, allowing unauthenticated attackers to modify GCP servic...
CVE-2026-67349 OpenCost < 1.121.0 Unauthenticated Helm Values Exposure and Admin Bypass
OpenCost before 1.121.0 fails to authenticate the GET /helmValues endpoint, exposing base64-decoded HELMVALUES environment variable containing cloud provider credentials. Additionally, adminAuthMiddleware fails open when ADMINTOKEN is unset, allowing unauthenticated attackers to modify GCP servic...
CVE-2026-67349 OpenCost < 1.121.0 Unauthenticated Helm Values Exposure and Admin Bypass
OpenCost before 1.121.0 fails to authenticate the GET /helmValues endpoint, exposing base64-decoded HELMVALUES environment variable containing cloud provider credentials. Additionally, adminAuthMiddleware fails open when ADMINTOKEN is unset, allowing unauthenticated attackers to modify GCP servic...
CLEANSTART-2026-EU29401 Security fixes in helm-fips 3.19.0-r2
Package helm-fips version 3.19.0-r2 fixes 4 vulnerabilities: ghsa-pwhc-rpq9-4c8w, ghsa-m6hq-p25p-ffr2, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...
CLEANSTART-2026-JY37141 Security fixes in helm-fips 3.19.0-r1
Package helm-fips version 3.19.0-r1 fixes 6 vulnerabilities: CVE-2025-61727, CVE-2025-61729, ghsa-pwhc-rpq9-4c8w, ghsa-m6hq-p25p-ffr2, ghsa-f6x5-jh6r-wrfv...
CLEANSTART-2026-JA07066 Security fixes in helm-fips 4.0.5-r0
Package helm-fips version 4.0.5-r0 fixes 2 vulnerabilities: CVE-2025-68121, CVE-2025-61732...
CLEANSTART-2026-IP24162 Security fixes in helm 4.0.5-r5
Package helm version 4.0.5-r5 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...
CLEANSTART-2026-QV76866 Security fixes in helm 3.19.5-r0
Package helm version 3.19.5-r0 fixes 5 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2025-68121, CVE-2025-61732, CVE-2026-27139...
CLEANSTART-2026-AJ34646 Security fixes in helm 4.0.1-r0
Package helm version 4.0.1-r0 fixes 1 vulnerabilities: CVE-2025-61729...
CLEANSTART-2026-MB11718 Security fixes in helm 3.19.0-r0
Package helm version 3.19.0-r0 fixes 10 vulnerabilities: CVE-2025-47912, CVE-2025-58183, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188...
CLEANSTART-2026-IK55843 Security fixes in helm 4.1.4-r2
Package helm version 4.1.4-r2 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...
CLEANSTART-2026-WU83083 Security fixes in helm-operator 1.41.1-r0
Package helm-operator version 1.41.1-r0 fixes 10 vulnerabilities: CVE-2025-47912, CVE-2025-58183, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188...
CLEANSTART-2026-NF04664 Security fixes in helm-fips 4.0.1-r0
Package helm-fips version 4.0.1-r0 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...
CLEANSTART-2026-JP45328 Security fixes in helm-fips 3.17-4-r1
Package helm-fips version 3.17-4-r1 fixes 4 vulnerabilities: ghsa-6v2p-p543-phr9, ghsa-pwhc-rpq9-4c8w, ghsa-265r-hfxg-fhmg, ghsa-m6hq-p25p-ffr2...
CLEANSTART-2026-JV33217 Security fixes in helm-operator-fips 1.41.1-r2
Package helm-operator-fips version 1.41.1-r2 fixes 52 vulnerabilities: ghsa-mh2q-q3fh-2475, CVE-2026-39820, CVE-2025-68121, CVE-2026-25679, ghsa-p77j-4mvh-x3m3...
CLEANSTART-2026-BZ47177 Security fixes in helm-fips 4.1.0-r0
Package helm-fips version 4.1.0-r0 fixes 1 vulnerabilities: CVE-2026-1229...
CLEANSTART-2026-PW58668 Security fixes in helm-operator 1.42.2-r2
Package helm-operator version 1.42.2-r2 fixes 4 vulnerabilities: ghsa-jpcc-p29g-p8mq, ghsa-xhf5-7wjv-pqxp, CVE-2026-47262, CVE-2026-53488...