Skip to content
OpenAdvisories

Package · Go

github.com/metal3-io/baremetal-operator/apis

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2025-29781

    Bare Metal Operator (BMO) can expose any secret from other namespaces via BMCEventSubscription CRD

    The Bare Metal Operator (BMO) implements a Kubernetes API for managing bare metal hosts in Metal3. Baremetal Operator enables users to load Secret from arbitrary namespaces upon deployment of the namespace scoped Custom Resource `BMCEventSubscription`. Prior …

    metal3-io baremetal-operator github.com/metal3-io/baremetal-operator/apis Go