Vulnerabilidades en bank-vaults

1 resultado
CVE-2026-54725CRITICALvault-addr annotation SSRF -- webhook makes outbound HTTP call to attacker URL during admission; vault-serviceaccount enables cluster-wide SA token theft via TokenRequest APIEPSS 0.4%