55 matches found
CLEANSTART-2026-NE90506 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label
Multiple security vulnerabilities affect the sealed-secrets package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...
PT-2026-99826
Multiple security vulnerabilities affect the sealed-secrets package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...
CVE-2026-59341
A security vulnerability exists in the Sealed Secrets controller's unauthenticated POST endpoints. By submitting a modified payload containing custom Go template logic in spec.template.data, an attacker with internal network access can abuse the handler as a decryption oracle to recover the full...
EUVD-2026-78349
A security vulnerability exists in the Sealed Secrets controller's unauthenticated POST endpoints. By submitting a modified payload containing custom Go template logic in spec.template.data, an attacker with internal network access can abuse the handler as a decryption oracle to recover the full...
CVE-2026-59341
Sealed Secrets controller (Bitnami) is vulnerable to a decryption oracle via Go template injection in its unauthenticated POST /v1/verify and /v1/rotate endpoints. The root cause is a missing AEAD label binding : the spec.template.data field is excluded from the authenticated-data label, letting ...
CVE-2026-59341 Sealed Secrets: decryption oracle via Go template injection in unauthenticated controller endpoints
A security vulnerability exists in the Sealed Secrets controller's unauthenticated POST endpoints. By submitting a modified payload containing custom Go template logic in spec.template.data, an attacker with internal network access can abuse the handler as a decryption oracle to recover the full...
CVE-2026-59341 Sealed Secrets: decryption oracle via Go template injection in unauthenticated controller endpoints
A security vulnerability exists in the Sealed Secrets controller's unauthenticated POST endpoints. By submitting a modified payload containing custom Go template logic in spec.template.data, an attacker with internal network access can abuse the handler as a decryption oracle to recover the full...
CVE-2026-59341 Sealed Secrets: decryption oracle via Go template injection in unauthenticated controller endpoints
A security vulnerability exists in the Sealed Secrets controller's unauthenticated POST endpoints. By submitting a modified payload containing custom Go template logic in spec.template.data, an attacker with internal network access can abuse the handler as a decryption oracle to recover the full...
CVE-2026-59341: Observable Discrepancy
A security vulnerability exists in the Sealed Secrets controller's unauthenticated POST endpoints. By submitting a modified payload containing custom Go template logic in spec.template.data, an attacker with internal network access can abuse the handler as a decryption oracle to recover the full...
PT-2026-91906
Name of the Vulnerable Software and Affected Versions Sealed Secrets affected versions not specified Description Unauthenticated POST endpoints in the Sealed Secrets controller allow an attacker with internal network access to use the handler as a decryption oracle to recover the plaintext of any...
CLEANSTART-2026-LA96365 Previously, a channel registered in the mux's chanList is not usable until it is established
Multiple security vulnerabilities affect the sealed-secrets package. Previously, a channel registered in the mux's chanList is not usable until it is established. See references for individual vulnerability details...
CLEANSTART-2026-MM20617 Previously, a channel registered in the mux's chanList is not usable until it is established
Multiple security vulnerabilities affect the sealed-secrets package. Previously, a channel registered in the mux's chanList is not usable until it is established. See references for individual vulnerability details...
CLEANSTART-2026-OX90258 Previously, a channel registered in the mux's chanList is not usable until it is established
Multiple security vulnerabilities affect the sealed-secrets package. Previously, a channel registered in the mux's chanList is not usable until it is established. See references for individual vulnerability details...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: delve, crossplane-provider-aws-kms, bento, gogatekeeper, kiali, multus-cni, dask-gateway, fluent-bit-plugin-loki, continuity, crossplane-provider-aws-rds, k9s, kubescape, nri-mssql, pulumi-language-java, spicedb-operator, podinfo, kubevela, cert-manager-webhook-pdns,...
GO-2026-5037 vulnerabilities
Vulnerabilities for packages: delve, crossplane-provider-aws-kms, bento, gogatekeeper, kiali, multus-cni, dask-gateway, fluent-bit-plugin-loki, continuity, crossplane-provider-aws-rds, k9s, kubescape, nri-kafka, nri-mssql, pulumi-language-java, podinfo, spicedb-operator, kubevela,...
GO-2026-5013 vulnerabilities
Vulnerabilities for packages: podman, crossplane-provider-aws-kms, tkn, docker, pulumi-language-java, crossplane-provider-aws-rds, kargo, k9s, kubescape, nerdctl, nuclei, melange, crossplane-provider-aws-sqs, gatus, cosign, crossplane-provider-azure-storage, crossplane-provider-aws-iam, trivy,...
GO-2026-4340 vulnerabilities
Vulnerabilities for packages: bento, gogatekeeper, dask-gateway, nginx-prometheus-exporter, crossplane-provider-aws-rds, nerdctl, kyverno-policy-reporter-ui, minio-operator, helm-set-status, podinfo, lazygit, cloud-provider-vsphere, boring-registry, bom, ratify, kserve-modelmesh-serving, blobfuse...
CLEANSTART-2026-ZK94752 Security fixes in sealed-secrets 0.37.0-r1
Package sealed-secrets version 0.37.0-r1 fixes 4 vulnerabilities: CVE-2026-46600, CVE-2026-56852, CVE-2026-39822, CVE-2026-42505...