CLEANSTART-2026-NE90506 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

Multiple security vulnerabilities affect the sealed-secrets package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...

CVE-2026-59341

A security vulnerability exists in the Sealed Secrets controller's unauthenticated POST endpoints. By submitting a modified payload containing custom Go template logic in spec.template.data, an attacker with internal network access can abuse the handler as a decryption oracle to recover the full...

CVE-2026-59341 Sealed Secrets: decryption oracle via Go template injection in unauthenticated controller endpoints

A security vulnerability exists in the Sealed Secrets controller's unauthenticated POST endpoints. By submitting a modified payload containing custom Go template logic in spec.template.data, an attacker with internal network access can abuse the handler as a decryption oracle to recover the full...

EUVD-2026-78349

A security vulnerability exists in the Sealed Secrets controller's unauthenticated POST endpoints. By submitting a modified payload containing custom Go template logic in spec.template.data, an attacker with internal network access can abuse the handler as a decryption oracle to recover the full...

CVE-2026-59341

Sealed Secrets controller (Bitnami) is vulnerable to a decryption oracle via Go template injection in its unauthenticated POST /v1/verify and /v1/rotate endpoints. The root cause is a missing AEAD label binding : the spec.template.data field is excluded from the authenticated-data label, letting ...

CVE-2026-59341 Sealed Secrets: decryption oracle via Go template injection in unauthenticated controller endpoints

A security vulnerability exists in the Sealed Secrets controller's unauthenticated POST endpoints. By submitting a modified payload containing custom Go template logic in spec.template.data, an attacker with internal network access can abuse the handler as a decryption oracle to recover the full...

CVE-2026-59341 Sealed Secrets: decryption oracle via Go template injection in unauthenticated controller endpoints

A security vulnerability exists in the Sealed Secrets controller's unauthenticated POST endpoints. By submitting a modified payload containing custom Go template logic in spec.template.data, an attacker with internal network access can abuse the handler as a decryption oracle to recover the full...

PT-2026-91906

A security vulnerability exists in the Sealed Secrets controller's unauthenticated POST endpoints. By submitting a modified payload containing custom Go template logic in spec.template.data, an attacker with internal network access can abuse the handler as a decryption oracle to recover the full...

CLEANSTART-2026-LA96365 Previously, a channel registered in the mux's chanList is not usable until it is established

Multiple security vulnerabilities affect the sealed-secrets package. Previously, a channel registered in the mux's chanList is not usable until it is established. See references for individual vulnerability details...

CLEANSTART-2026-MM20617 Previously, a channel registered in the mux's chanList is not usable until it is established

Multiple security vulnerabilities affect the sealed-secrets package. Previously, a channel registered in the mux's chanList is not usable until it is established. See references for individual vulnerability details...

CLEANSTART-2026-OX90258 Previously, a channel registered in the mux's chanList is not usable until it is established

Multiple security vulnerabilities affect the sealed-secrets package. Previously, a channel registered in the mux's chanList is not usable until it is established. See references for individual vulnerability details...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: emissary, pgpool2exporter, cert-manager, container-object-storage-interface, step-issuer, grafana-rollout-operator, rancher-helm, containerd, kubernetes-csi-livenessprobe, redka, datadog-agent, fuse-overlayfs-snapshotter, pulumi-language-java, witness, steampipe,...

GO-2026-5037 vulnerabilities

Vulnerabilities for packages: emissary, pgpool2exporter, cert-manager, container-object-storage-interface, step-issuer, grafana-rollout-operator, rancher-helm, containerd, kubernetes-csi-livenessprobe, redka, datadog-agent, fuse-overlayfs-snapshotter, pulumi-language-java, witness, steampipe,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: cluster-api-azure-controller, cert-manager, buildkitd, step-issuer, k8sgpt, containerd, nuclei, datadog-agent, pulumi-language-java, witness, teleport, steampipe, crossplane-provider-aws-ec2, scorecard, wal-g, atlantis, crossplane-provider-aws-cloudfront, gitlab-page...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: pgpool2exporter, container-object-storage-interface, grafana-rollout-operator, rancher-helm, tfsec, kubernetes-csi-livenessprobe, kubernetes-dashboard-api, redka, fuse-overlayfs-snapshotter, go-licenses, kubernetes-csi-driver-nfs, http-echo, ytt, dockerize, steampipe...

CLEANSTART-2026-UH65554 Security fixes in sealed-secrets 0.35.0-r3

Package sealed-secrets version 0.35.0-r3 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-QP70970 Security fixes in sealed-secrets 0.36.6-r2

Package sealed-secrets version 0.36.6-r2 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-ZK94752 Security fixes in sealed-secrets 0.37.0-r1

Package sealed-secrets version 0.37.0-r1 fixes 4 vulnerabilities: CVE-2026-46600, CVE-2026-56852, CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-VC40164 Security fixes in sealed-secrets 0.36.6-r3

Package sealed-secrets version 0.36.6-r3 fixes 4 vulnerabilities: CVE-2026-46600, CVE-2026-56852, CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-NF83419 Security fixes in sealed-secrets 0.36.1-r0

Package sealed-secrets version 0.36.1-r0 fixes 7 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288...