Bitnami
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| sealed-secrets | 2 | – | Sep 15, 2026 |
| bitnami/cassandra | 1 | – | Jun 18, 2026 |
| bitnami/mariadb-galera | 1 | – | Jun 18, 2026 |
| bitnami/mariadb-galera Helm chart | 1 | – | Jun 18, 2026 |
Exploited and recent CVEs
- CVE-2026-59341 Sealed Secrets: decryption oracle via Go template injection in unauthenticated controller endpoints 0.4%
- CVE-2026-47846 Bitnami Cassandra container images are affected by a retained default superuser vulnerability. When a custom administrator account is configured via the CASSANDRA_USER environment variable, the contai 0.5%
- CVE-2026-47847 Bitnami MariaDB Galera container images and Helm chart are affected by a hardcoded default credential vulnerability in the Galera replication health-check user. The MARIADB_REPLICATION_USER and MARIAD 0.3%
- CVE-2026-47847 Bitnami MariaDB Galera container images and Helm chart are affected by a hardcoded default credential vulnerability in the Galera replication health-check user. The MARIADB_REPLICATION_USER and MARIAD 0.3%
- CVE-2026-22728 sealed-secrets /v1/rotate can widen sealing scope to cluster-wide via attacker-controlled template annotations 0.4%