external-secrets-operator-0.17
Chainguard
Status
Impact
A patch for this vulnerability is not yet available for versions older than 0.20.0. The recommended workaround is to use a policy engine such as Kyverno or OPA to prevent using BeyondTrust provider and/or validate the (Cluster)SecretStore and ensure the namespace may only be set when using a ClusterSecretStore. Alternatively, upgrade to external-secrets-provider version 0.20.0 or later.
Status