All 1 CVE vulnerabilities found in vault-secrets-webhook, with AI-generated Chinese analysis, references, and POCs.
Vendor: bank-vaults
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-54725 | vault-addr annotation SSRF -- webhook makes outbound HTTP call to attacker URL during admission; vault-serviceaccount enables cluster-wide SA token theft via TokenRequest API CWE-918 | 9.6 | Critical | 2026-07-31 |
All 1 known CVE vulnerabilities affecting vault-secrets-webhook with full Chinese analysis, references, and POCs where available.