CVE Intelligence

CloudPirates-io vulnerabilities

🔔 Create alert RSS

Published CVEs affecting CloudPirates-io products: 2 record(s), with severity, exploitation and fixes.

Helm-charts 2

Exploited only (KEV) →

CVE-2026-45132 Critical · 10.0 CWE-94 Jun 1, 2026
CloudPirates Open Source Helm Charts: GitHub Actions workflow leaks PAT and SSH signing key via unsafe credential handling
CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow (generate-schema.yaml) exposes sensitive credentials (Personal Access Token and SSH signing key) to fork-controlled code due to unsafe checkout and credential handling practices. This issue has been patched via commit fcf9302.
CVE-2026-45131 Critical · 10.0 CWE-94 Jun 1, 2026
CloudPirates Open Source Helm Charts: GitHub Actions pull_request_target workflow allows secret exfiltration via fork pull requests
CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow (pull-request.yaml) executes attacker-controlled code from fork pull requests in a privileged context, exposing repository secrets including Docker Hub credentials and tokens without requiring maintainer approval. This issue has been patched via commit fcf9302.