Skip to content
OpenAdvisories

Product · Eclipse Foundation

Eclipse BaSyx Helm Charts

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-123059

    Keycloak admin client secret stored in cleartext in a ConfigMap in Eclipse BaSyx Helm Charts

    In Eclipse BaSyx Helm Charts version 2.2.0 of the `aas-basyx-v2-full` chart, deployments with the bundled Keycloak enabled store the client secret of the `basyx-technical-user` OAuth2 client in cleartext in a Kubernetes ConfigMap. This client uses the client-…

    Eclipse Foundation Eclipse BaSyx Helm Charts
  • High 7.5
    CVE-2026-123047

    Keycloak admin user password stored in cleartext in a ConfigMap in Eclipse BaSyx Helm Charts

    In Eclipse BaSyx Helm Charts versions 3.0.0-rc.1 to 3.12.1 of the `basyx` chart, deployments with the bundled Keycloak enabled store the passwords of the Keycloak users that the chart creates in cleartext in a Kubernetes ConfigMap. The template `keycloak-init…

    Eclipse Foundation Eclipse BaSyx Helm Charts