TI-2026-42460 CVE-2026-59341
Sealed Secrets: decryption oracle via Go template injection in unauthenticated controller endpoints
Priority MEDIUM 53
A security vulnerability exists in the Sealed Secrets controller's unauthenticated POST endpoints.
Bitnami
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Bitnami records in CISA KEVNo Bitnami vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2026-35298 CVE-2026-47846
Hard-coded credentials in bitnami/cassandra
Priority MEDIUM 49
Bitnami Cassandra container images are affected by a retained default superuser vulnerability.
TI-2021-05023 CVE-2021-21979 · GHSA-fqf3-g95f-m2v9
Hard-coded credentials in Bitnami Containers
Priority LOW 33
In Bitnami Containers, all Laravel container versions prior to: 6.20.0-debian-10-r107 for Laravel 6, 7.30.1-debian-10-r108 for Laravel 7 and 8.5.11-debian-10-r0 for Laravel 8, the file /tmp/app/.env is generated at the t…
Priority LOW 30
Bitnami MariaDB Galera container images and Helm chart are affected by a hardcoded default credential vulnerability in the Galera replication health-check user.
TI-2026-18253 CVE-2026-22728 · GHSA-465p-v42x-3fmj
sealed-secrets /v1/rotate can widen sealing scope to cluster-wide via attacker-controlled template annotations
Priority LOW 23
Bitnami Sealed Secrets is vulnerable to a scope-widening attack during the secret rotation (/v1/rotate) flow.