cottage

cott age est un outil GitOps permettant aux équipes de gérer des secrets chiffrés avec age dans des dépôts git. Il fournit un flux de travail simple pour chiffrer/déchiffrer des secrets, gérer les destinataires et garder les secrets hors du dépôt tout en permettant un partage facile via le VCS...

envsec

envsec Gestion sécurisée des secrets d'environnement à l'aide des magasins d'identifiants natifs du système d'exploitation. Démo Fonctionnalités Stockez les secrets dans le magasin d'identifiants natif de votre système d'exploitation pas dans des fichiers texte brut Multi-plateforme : macOS, Linu...

conjur

Conjur Maintainability Test Coverage Conjur fournit la gestion des secrets et l'identité des applications pour l'infrastructure moderne : Machine Authorization Markup Language « MAML » , un langage de politique d'accès basé sur les rôles pour définir les composants système et leurs rôles,...

wrongsecrets

OWASP WrongSecrets !Docker container testhttps://github.com/OWASP/wrongsecrets/actions/workflow...

vault

Vault Please note : We take Vault's security and our users' trust very seriously. If you believe you have found a security issue in Vault, please responsibly disclose by contacting us at [email protected]. Website: developer.hashicorp.com/vault Announcement list: Google Groups Discussion...

GO-2024-2982 vulnerabilities

Vulnerabilities for packages: vault...

GO-2026-5377 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

GO-2026-5723 vulnerabilities

Vulnerabilities for packages: external-secrets-operator...

GO-2026-5426 vulnerabilities

Vulnerabilities for packages: net-kourier, cluster-api-ipam-provider-in-cluster, lazydocker, flux-kustomize-controller, k6, prometheus-alertmanager, grafana-mimir, crossplane-provider-aws-sns, tkn, op-geth, spire-server, cass-operator, crossplane-provider-aws-cloudwatchlogs, falco-no-driver,...

GO-2025-3553 vulnerabilities

Vulnerabilities for packages: oauth2-proxy, flux-kustomize-controller, grafana-mimir, tkn, op-geth, spire-server, falcosidekick, crossplane-provider-azure-storage, step-kms-plugin, flux-image-reflector-controller, terraform, terragrunt, flux-image-automation-controller,...

Important: Red Hat Security Advisory: external secrets operator for Red Hat OpenShift 1.1.1

external secrets operator for Red Hat OpenShift 1.1.1 The External Secrets Operator for Red Hat OpenShift builds on top of Kubernetes, which integrates external secret management systems like AWS Secrets Manager, HashiCorp Vault, Google Secrets Manager, Azure Key Vault, IBM Cloud Secrets Manager,...

BIT-OPENBAO-2026-40264 OpenBao's Token Store Allows Cross-Namespace Renewal, Revocation

OpenBao is an open source identity-based secrets management system. OpenBao's namespaces provide multi-tenant separation. Prior to version 2.5.3, a tenant who leaks token accessors can have their token revoked or renewed by a privileged administrator in another tenant. This is addressed in v2.5.3...

[SECURITY] Fedora 43 Update: openbao-2.5.4-1.fc43

Openbao secures, stores, and tightly controls access to tokens, passwords, certificates, API keys, and other secrets in modern computing. Openbao handles leasing, key revocation, key rolling, and auditing. Through a unified API, us ers can access an encrypted Key/Value store and network...

[SECURITY] Fedora 43 Update: openbao-2.5.3-1.fc43

Openbao secures, stores, and tightly controls access to tokens, passwords, certificates, API keys, and other secrets in modern computing. Openbao handles leasing, key revocation, key rolling, and auditing. Through a unified API, us ers can access an encrypted Key/Value store and network...

[SECURITY] Fedora 44 Update: openbao-2.5.2-1.fc44

Openbao secures, stores, and tightly controls access to tokens, passwords, certificates, API keys, and other secrets in modern computing. Openbao handles leasing, key revocation, key rolling, and auditing. Through a unified API, us ers can access an encrypted Key/Value store and network...

CVE-2026-40264

OpenBao is an open source identity-based secrets management system. OpenBao's namespaces provide multi-tenant separation. Prior to version 2.5.3, a tenant who leaks token accessors can have their token revoked or renewed by a privileged administrator in another tenant. This is addressed in v2.5.3...

CVE-2026-40264

OpenBao is an open source identity-based secrets management system. OpenBao's namespaces provide multi-tenant separation. Prior to version 2.5.3, a tenant who leaks token accessors can have their token revoked or renewed by a privileged administrator in another tenant. This is addressed in v2.5.3...

CVE-2026-39946

OpenBao is an open source identity-based secrets management system. Prior to version 2.5.3, when OpenBao revoked privileges on a role in the PostgreSQL database secrets engine, OpenBao failed to use proper database quoting on schema names provided by PostgreSQL. This could lead to role revocation...

CVE-2026-33758

OpenBao is an open source identity-based secrets management system. Prior to version 2.5.2, OpenBao installations that have an OIDC/JWT authentication method enabled and a role with callbackmode=direct configured are vulnerable to XSS via the errordescription parameter on the page for a failed...

CVE-2026-33757

OpenBao (before 2.5.2) is vulnerable to a login flow issue when using JWT/OIDC with a role whose callback_mode is direct: no user confirmation is prompted, enabling remote phishing by auto-logging in to the attacker’s session. Version 2.5.2 adds a confirmation screen for direct logins to require ...