Skip to content
OpenAdvisories

Vendor

CloudPirates-io

3 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 6.9

    CloudPirates Open Source Helm Charts: pull_request_target workflow vulnerable to cache poisoning and OIDC token theft

    CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit 271d415, pull_request_target workflow is vulnerable to cache poisoning and OIDC token theft. A pull_request_target workflow checks out fork code using github.event.pull_reque…