Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow (generate-schema.yaml) exposes sensitive credentials (Personal Access Token and SSH signing key) to fork-controlled code due to unsafe checkout and credential handling practices. This issue has been patched via commit fcf9302.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-06-01 | 1 | Disclosure1 |
| 2026-06-12 | 1 | General1 |
🧨 CI/CD and Supply Chain: CloudPirates Helm Charts Two related CVSS 10.0 flaws — CVE-2026-45131 and CVE-2026-45132 — affect the CloudPirates Open Source Helm Charts repository. Prior to commit fcf9302, GitHub Actions workflows…
Post summary
The snippet merely announces two high‑severity CVEs affecting CloudPirates Helm Charts without providing details on exploitation, patches, or operational impact.
CVE-2026-45132 Sensitive Credential Exposure in CloudPirates Helm Charts GitHub Actions Workflow https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-45132
Post summary
The posting announces a new CVE (CVE-2026-45132) highlighting credential exposure in CloudPirates Helm Charts GitHub Actions workflows, with no PoC, exploit, or patch information provided.