CloudPirates-io/helm-charts

CloudPirates-io/helm-charts

Releases1.01K

Frequency6 hours

Last Release 14 days ago

Stars554

This repository contains public Helm Charts for commonly used software

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2026-45131 ↗	Jun 1, 2026Monday, 1 June 2026, 17:17	10 CRITICAL	—
CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow (pull-request.yaml) executes attacker-controlled code from fork pull requests in a privileged context, exposing repository secrets including Docker Hub credentials and tokens without requiring maintainer approval. This issue has been patched via commit fcf9302.
CVE-2026-45132 ↗	Jun 1, 2026Monday, 1 June 2026, 17:17	10 CRITICAL	—
CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow (generate-schema.yaml) exposes sensitive credentials (Personal Access Token and SSH signing key) to fork-controlled code due to unsafe checkout and credential handling practices. This issue has been patched via commit fcf9302.