1843 matches found
GHSA-W9P8-PVXH-RXPJ vulnerabilities
Vulnerabilities for packages: minio, kyverno, grafana-pyroscope, prometheus, kine, snyk-cli, zot, fq, external-secrets-operator, gitea, ingress-nginx-controller, hydra, step-issuer, helm, karpenter, gptscript, nerdctl, crossplane-provider-azure-storage, crossplane-provider-azure-authorization,...
GHSA-WRH2-89VG-4J9G vulnerabilities
Vulnerabilities for packages: minio, kyverno, grafana-pyroscope, prometheus, kine, snyk-cli, zot, fq, external-secrets-operator, gitea, ingress-nginx-controller, hydra, step-issuer, helm, karpenter, gptscript, nerdctl, crossplane-provider-azure-storage, crossplane-provider-azure-authorization,...
CVE-2026-42502 vulnerabilities
Vulnerabilities for packages: minio, kyverno, grafana-pyroscope, prometheus, kine, snyk-cli, zot, fq, external-secrets-operator, gitea, ingress-nginx-controller, hydra, step-issuer, helm, karpenter, gptscript, nerdctl, crossplane-provider-azure-storage, crossplane-provider-azure-authorization,...
GHSA-CG87-VWWH-XVGJ vulnerabilities
Vulnerabilities for packages: minio, kyverno, grafana-pyroscope, prometheus, kine, snyk-cli, zot, fq, external-secrets-operator, gitea, ingress-nginx-controller, hydra, step-issuer, helm, karpenter, gptscript, nerdctl, crossplane-provider-azure-storage, crossplane-provider-azure-authorization,...
GHSA-5CV4-JP36-H3MW vulnerabilities
Vulnerabilities for packages: minio, kyverno, grafana-pyroscope, prometheus, kine, snyk-cli, zot, fq, external-secrets-operator, gitea, ingress-nginx-controller, hydra, step-issuer, helm, karpenter, gptscript, nerdctl, crossplane-provider-azure-storage, crossplane-provider-azure-authorization,...
CVE-2026-45132
CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow generate-schema.yaml exposes sensitive credentials Personal Access Token and SSH signing key to fork-controlled code due to unsafe checkout and credential handling practices. Th...
EUVD-2026-33666
CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow pull-request.yaml executes attacker-controlled code from fork pull requests in a privileged context, exposing repository secrets including Docker Hub credentials and tokens...
CVE-2026-45131 CloudPirates Open Source Helm Charts: GitHub Actions pull_request_target workflow allows secret exfiltration via fork pull requests
CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow pull-request.yaml executes attacker-controlled code from fork pull requests in a privileged context, exposing repository secrets including Docker Hub credentials and tokens...
CVE-2026-45131 CloudPirates Open Source Helm Charts: GitHub Actions pull_request_target workflow allows secret exfiltration via fork pull requests
CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow pull-request.yaml executes attacker-controlled code from fork pull requests in a privileged context, exposing repository secrets including Docker Hub credentials and tokens...
CVE-2026-45132
CVE-2026-45132 concerns CloudPirates Open Source Helm Charts. Prior to commit fcf9302, a GitHub Actions workflow (generate-schema.yaml) exposed sensitive credentials—Personal Access Token and an SSH signing key —to fork-controlled code due to unsafe checkout and credential handling practices. The...
CVE-2026-45132 CloudPirates Open Source Helm Charts: GitHub Actions workflow leaks PAT and SSH signing key via unsafe credential handling
CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow generate-schema.yaml exposes sensitive credentials Personal Access Token and SSH signing key to fork-controlled code due to unsafe checkout and credential handling practices. Th...
CVE-2026-45132 CloudPirates Open Source Helm Charts: GitHub Actions workflow leaks PAT and SSH signing key via unsafe credential handling
CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow generate-schema.yaml exposes sensitive credentials Personal Access Token and SSH signing key to fork-controlled code due to unsafe checkout and credential handling practices. Th...
EUVD-2026-33665
CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow generate-schema.yaml exposes sensitive credentials Personal Access Token and SSH signing key to fork-controlled code due to unsafe checkout and credential handling practices. Th...
CVE-2026-45132 CloudPirates Open Source Helm Charts: GitHub Actions workflow leaks PAT and SSH signing key via unsafe credential handling
CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow generate-schema.yaml exposes sensitive credentials Personal Access Token and SSH signing key to fork-controlled code due to unsafe checkout and credential handling practices. Th...
SUSE-SU-2026:21881-1 Security update for helm
This update for helm fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1265758. - CVE-2026-41888: github.com/distribution/distribution/v3: tag deletion bypasses the storage.delete.enabled configuration...
aks-poc-setup
AKS Production-Grade POC Setup A comprehensive, production-re...
PT-2026-45468
Name of the Vulnerable Software and Affected Versions CloudPirates Open Source Helm Charts versions prior to commit fcf9302 Description A GitHub Actions workflow named 'generate-schema.yaml' exposes sensitive credentials, specifically a Personal Access Token and an SSH signing key, to code...
CloudPirates Open Source Helm Charts 代码注入漏洞
CloudPirates Open Source Helm Charts is a collection of Helm Charts for cloud-native applications, developed by CloudPirates.io. Previous versions of CloudPirates Open Source Helm Charts had a code injection vulnerability. This vulnerability stemmed from GitHub Actions workflows exposing sensitiv...
CVE-2026-45131: Improper Control of Generation of Code
CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow pull-request.yaml executes attacker-controlled code from fork pull requests in a privileged context, exposing repository secrets including Docker Hub credentials and tokens...
CloudPirates Open Source Helm Charts 代码注入漏洞
CloudPirates Open Source Helm Charts is a collection of Helm Charts for cloud-native applications, developed by CloudPirates.io. Previous versions of CloudPirates Open Source Helm Charts had a code injection vulnerability. This vulnerability stems from executing code controlled by the attacker in...