external secrets operator for Red Hat OpenShift 1.1 vulnerabilities

2 known vulnerabilities in external secrets operator for Red Hat OpenShift 1.1 from Red Hat. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  crypto/x509: Unchecked Input for Loop Condition

  CVE-2026-27145Jun 2, 2026Go standard library

  (*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, ".") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification co

• 7.5 High severity

  golang.org/x/crypto/ssh: Improper Certificate Validation

  CVE-2026-39835May 22, 2026Golang.org/x/crypto

  SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.