Skip to content
OpenAdvisories

Package · Go

github.com/external-secrets/external-secrets

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-22822

    External Secrets Operator insecurely retrieves secrets through the getSecretKey templating function

    External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. Starting in version 0.20.2 and prior to version 1.2.0, the `getSecretKey` template function, while introduced for senhasegura De…

    external-secrets external-secrets github.com/external-secrets/external-secrets Go