AIKIDO-2025-10373
github.com/bitnami-labs/sealed-secrets is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
30
Low Risk
This Affects:
github.com/bitnami-labs/sealed-secretsTL;DR
Affected versions of the github.com/bitnami-labs/sealed-secrets library are vulnerable to sensitive data exposure due to the inclusion of certain sprig template functions. Specifically, the env and expandenv functions could expose controller environment variables containing secrets, while getHostByName allowed DNS resolution from within templates, which may be unsafe in certain environments. The patch removes these functions to prevent unintended information disclosure and improve security.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
github.com/bitnami-labs/sealed-secrets is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in versions 0.27.0 - 0.29.0.
How to fix this
Upgrade the github.com/bitnami-labs/sealed-secrets library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant