bank-vaults/vault-secrets-webhook Security Advisories | GitStock

critical2026-07-31

vault-addr annotation SSRF -- webhook makes outbound HTTP call to attacker URL during admission; vault-serviceaccount enables cluster-wide SA token theft via TokenRequest API

GHSA-r2v3-8gwf-7ghm · CVE-2026-54725