CVE-2026-42876

2 advisories.

Go/github.com/external-secrets/external-secrets/apis CVE-2026-42876: medium 4.9

ExternalSecrets vulnerable to privilege escalation with secret overwriting

Action: Upgrade github.com/external-secrets/external-secrets/apis to 2.4.1 or later.

go get github.com/external-secrets/external-secrets/apis@v2.4.1

Affected

introduced	fixed	last affected
0.1.0	2.4.1	-

Fixed versions

2.4.1

Sources

CVE-2026-42876 · published 2026-05-08T17:24:15Z · modified 2026-09-10T03:50:46.751702127Z · JSON

Go/github.com/external-secrets/external-secrets/apis CVE-2026-42876: unknown

ExternalSecrets vulnerable to privilege escalation with secret overwriting in github.com/external-secrets/external-secrets/apis

Action: No fix published. Pin and monitor.

Affected

introduced	fixed	last affected
0	-	-

Fixed versions

No fixed version in the source.

Sources

CVE-2026-42876 · published 2026-06-25T18:43:19Z · modified 2026-06-25T19:45:36.828263767Z · JSON