Skip to content
OpenAdvisories

Package · Go

github.com/metal3-io/ip-address-manager

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 4.4
    CVE-2026-47190

    IPAM controller service account granted unnecessary full access to Secrets

    IPAM is the IP address Manager for Cluster API Provider Metal3. Prior to versions 1.11.7, 1.12.4, and 1.13.0, the IPAM controller's ClusterRole granted full CRUD permissions (create, delete, get, list, patch, update, watch) on core/v1 Secrets. The controller …

    metal3-io ip-address-manager github.com/metal3-io/ip-address-manager Go