helm-charts vulnerabilities
2 known vulnerabilities in helm-charts from CloudPirates-io. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
2critical
0high
0exploited
10.0average CVSS score
Latest first
- 10.0 Critical severity
helm-charts: Improper Control of Generation of Code
CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow (generate-schema.yaml) exposes sensitive credentials (Personal Access Token and SSH signing key) to fork-controlled code due to unsafe check
- 10.0 Critical severity
helm-charts: Improper Control of Generation of Code
CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow (pull-request.yaml) executes attacker-controlled code from fork pull requests in a privileged context, exposing repository secrets including