Skip to content
OpenAdvisories

Package · Go

github.com/external-secrets/external-secrets

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-42875

    External Secrets Operator: Namespace Isolation Bypass in CAProvider ConfigMap Resolution for SecretStore

    External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. Prior to 2.4.0, Namespaced SecretStore resources that used CAProvider with type ConfigMap could resolve CA material from another…

    external-secrets external-secrets github.com/external-secrets/external-secrets Go