Go/github.com/external-secrets/external-secrets CVE-2024-45041: unknown, EPSS 0.59%

External Secrets Operator vulnerable to privilege escalation in github.com/external-secrets/external-secrets

Action: Upgrade github.com/external-secrets/external-secrets to 0.10.2 or later.

go get github.com/external-secrets/external-secrets@v0.10.2

Affected

Fixed versions

Sources

• osv: GO-2024-3126
• https://github.com/external-secrets/external-secrets/security/advisories/GHSA-qwgc-rr35-h4x9
• https://nvd.nist.gov/vuln/detail/CVE-2024-45041
• https://github.com/external-secrets/external-secrets/commit/0368b9806f660fa6bc52cbbf3c6ccdb27c58bb35
• https://github.com/external-secrets/external-secrets/commit/428a452fd2ad45935312f2c2c0d40bc37ce6e67c
• https://github.com/external-secrets/external-secrets/blob/main/deploy/charts/external-secrets/templates/cert-controller-rbac.yaml#L27
• https://github.com/external-secrets/external-secrets/blob/main/deploy/charts/external-secrets/templates/cert-controller-rbac.yaml#L49

CVE-2024-45041 · published 2024-09-13T21:52:55Z · modified 2026-03-03T04:55:47.664385Z · JSON