Skip to content
OpenAdvisories

Vendor

Bitnami

4 known vulnerabilities.

Products

sealed-secrets 2 bitnami/mariadb-galera 1 bitnami/mariadb-galera Helm chart 1 bitnami/cassandra 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.2
    CVE-2026-59341

    Sealed Secrets: decryption oracle via Go template injection in unauthenticated controller endpoints

    A security vulnerability exists in the Sealed Secrets controller's unauthenticated POST endpoints. By submitting a modified payload containing custom Go template logic in spec.template.data, an attacker with internal network access can abuse the handler as a …

    Bitnami sealed-secrets
  • Medium 5.3
    CVE-2026-47847

    Bitnami MariaDB Galera container images and Helm chart are affected by a hardcoded default credential vulnerability in …

    Bitnami bitnami/mariadb-galera Helm chart bitnami/mariadb-galera
  • Medium 4.9
    CVE-2026-22728

    sealed-secrets /v1/rotate can widen sealing scope to cluster-wide via attacker-controlled template annotations

    Bitnami Sealed Secrets is vulnerable to a scope-widening attack during the secret rotation (/v1/rotate) flow. The rotation handler derives the sealing scope for the newly encrypted output from untrusted spec.template.metadata.annotations present in the input …

    Bitnami sealed-secrets github.com/bitnami-labs/sealed-secrets Go