Bitnami sealed-secrets

• CVE-2026-59341 Medium 4.2 Sealed Secrets: decryption oracle via Go template injection in unauthenticated controller endpoints 0.4%
• CVE-2026-22728 Medium 4.9 sealed-secrets /v1/rotate can widen sealing scope to cluster-wide via attacker-controlled template annotations 0.4%