Filtered by vendor Cloudpirates-io
Subscriptions
Filtered by product Helm-charts
Subscriptions
Total
2 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-45132 | 1 Cloudpirates-io | 1 Helm-charts | 2026-06-02 | 10 Critical |
| CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow (generate-schema.yaml) exposes sensitive credentials (Personal Access Token and SSH signing key) to fork-controlled code due to unsafe checkout and credential handling practices. This issue has been patched via commit fcf9302. | ||||
| CVE-2026-45131 | 1 Cloudpirates-io | 1 Helm-charts | 2026-06-02 | 10 Critical |
| CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow (pull-request.yaml) executes attacker-controlled code from fork pull requests in a privileged context, exposing repository secrets including Docker Hub credentials and tokens without requiring maintainer approval. This issue has been patched via commit fcf9302. | ||||
Page 1 of 1.