Cloudpirates-Io Helm-Charts vulnerabilities

CVE-2026-45131 [CRITICAL] CWE-94 CVE-2026-45131: CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitH CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow (pull-request.yaml) executes attacker-controlled code from fork pull requests in a privileged context, exposing repository secrets including Docker Hub credentials and tokens without requiring maintainer approval. This issue has b

CVE-2026-45132 [CRITICAL] CWE-94 CVE-2026-45132: CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitH CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow (generate-schema.yaml) exposes sensitive credentials (Personal Access Token and SSH signing key) to fork-controlled code due to unsafe checkout and credential handling practices. This issue has been patched via commit fcf9302.