[ Vendor · 1 CVEs ]
external-secrets
CVEs affecting external-secrets published in the last 30 days, plus any external-secrets CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-26287 | 6 Oct 2026 | CVSS 7.1 | External Secrets Operator: label enforcement bypass in webhook generator enables secret exfiltrationExternal Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. Starting in… | Fix |