Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/01/20 4:37 p.m.•26 views

External Secrets Operator insecurely retrieves secrets through the getSecretKey templating function

Summary The getSecretKey template function, while introduced for senhasegura Devops Secrets Management DSM provider, has the ability to fetch secrets cross-namespaces with the roleBinding of the external-secrets controller, bypassing our security mechanisms. This function was completely removed, ...

9.3CVSS8AI score0.00192EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder