Advisories · Technology
CloudPirates-io helm-charts.
Every CVE that names CloudPirates-io helm-charts among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
CloudPirates Open Source Helm Charts: pull_request_target workflow vulnerable to cache poisoning and OIDC token theft
- CloudPirates-io helm-charts
- CWE-829
- CVSS 10.0 CriticalCritical · CVSS 9+
CloudPirates Open Source Helm Charts: GitHub Actions pull_request_target workflow allows secret exfiltration via fork pull requests
- CloudPirates-io helm-charts
- Code injection
- CVSS 10.0 CriticalCritical · CVSS 9+
CloudPirates Open Source Helm Charts: GitHub Actions workflow leaks PAT and SSH signing key via unsafe credential handling
- CloudPirates-io helm-charts
- Code injection