Go/github.com/external-secrets/external-secrets CVE-2026-42875: medium 5.3, EPSS 0.24%

External Secrets Operator has Namespace Isolation Bypass in CAProvider ConfigMap Resolution for SecretStore

Action: Upgrade github.com/external-secrets/external-secrets to 2.4.0 or later.

go get github.com/external-secrets/external-secrets@v2.4.0

Affected

Fixed versions

Sources

• osv: GHSA-wv26-88m5-6h59
• nvd: CVE-2026-42875
• https://github.com/external-secrets/external-secrets/security/advisories/GHSA-wv26-88m5-6h59
• https://github.com/external-secrets/external-secrets

CVE-2026-42875 · published 2026-05-05T18:37:12Z · modified 2026-09-10T03:50:47.914428146Z · JSON