Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
's credentials. This issue has been addressed in release version 1.33.0 and all users are advised to upgrade. The only known workaround for those who cannot upgrade is to not reuse usernames. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/treeverse/lakeFS/security/advisories/GHSA-hh33-46q4-hwm2 - https://github.com/treeverse/lakeFS/releases/tag/v1.33.0
CVE ID: CVE-2024-43785 State: PUBLISHED Published: 2024-08-22T14:19:31.070Z Last Updated: 2024-08-22T21:45:40.662Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Byron Products: gitoxide Problem Types: CWE-150 Description: gitoxide An idiomatic, lean, fast & safe pure Rust implementation of Git. gitoxide-core, which provides most underlying functionality of the gix and ein commands, does not neutralize newlines, backspaces, or control characters—including those that form ANSI escape sequences—that appear in a repository's paths, author and committer names, commit messages, or other metadata. Such text may be written as part of the output of a command, as well
mmitter names, commit messages, or other metadata. Such text may be written as part of the output of a command, as well as appearing in error messages when an operation fails. This sometimes allows an untrusted repository to misrepresent its contents and to alter or concoct error messages. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Byron/gitoxide/security/advisories/GHSA-88g2-r9rw-g55h
CVE ID: CVE-2024-43787 State: PUBLISHED Published: 2024-08-22T14:23:44.025Z Last Updated: 2024-08-22T15:40:32.051Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: honojs Products: hono Problem Types: CWE-352 Description: Hono is a Web application framework that provides support for any JavaScript runtime. Hono CSRF middleware can be bypassed using crafted Content-Type header. MIME types are case insensitive, but isRequestedByFormElementRe only matches lower-case. As a result, attacker can bypass csrf middleware using upper-case form-like MIME type. This vulnerability is fixed in 4.5.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gi
type. This vulnerability is fixed in 4.5.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/honojs/hono/security/advisories/GHSA-rpfr-3m35-5vx5 - https://github.com/honojs/hono/commit/41ce840379516410dee60c783142e05bb5a22449 - https://github.com/honojs/hono/blob/b0af71fbcc6dbe44140ea76f16d68dfdb32a99a0/src/middleware/csrf/index.ts#L16-L17
CVE ID: CVE-2024-43788 State: PUBLISHED Published: 2024-08-27T17:07:16.285Z Last Updated: 2025-01-09T17:41:35.616Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: webpack Products: webpack Problem Types: CWE-79 Description: Webpack is a module bundler. Its main purpose is to bundle JavaScript files for usage in a browser, yet it is also capable of transforming, bundling, or packaging just about any resource or asset. The webpack developers have discovered a DOM Clobbering vulnerability in Webpack’s `AutoPublicPathRuntimeModule`. The DOM Clobbering gadget in the module can lead to cross-site scripting (XSS) in web pages where scriptless attacker-controlled HT
bbering gadget in the module can lead to cross-site scripting (XSS) in web pages where scriptless attacker-controlled HTML elements (e.g., an `img` tag with an unsanitized `name` attribute) are present. Real-world exploitation of this gadget has been observed in the Canvas LMS which allows a XSS attack to happen through a javascript code compiled by Webpack (the vulnerable part is from Webpack). DOM Clobbering is a type of code-reuse attack where the attacker first embeds a piece of non-script, seemingly benign HTML markups in the webpage (e.g. through a post or comment) and leverages the gadgets (pieces of js code) living in the existing javascript code to transform it into executable code.
d leverages the gadgets (pieces of js code) living in the existing javascript code to transform it into executable code. This vulnerability can lead to cross-site scripting (XSS) on websites that include Webpack-generated files and allow users to inject certain scriptless HTML tags with improperly sanitized name or id attributes. This issue has been addressed in release version 5.94.0. All users are advised to upgrade. There are no known workarounds for this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/webpack/webpack/security/advisories/GHSA-4vvj-4cpr-p986 - https://github.com/webpack/webpack/issues/18718#issuecomment-2326296270 - https://github
dvisories/GHSA-4vvj-4cpr-p986 - https://github.com/webpack/webpack/issues/18718#issuecomment-2326296270 - https://github.com/webpack/webpack/commit/955e057abc6cc83cbc3fa1e1ef67a49758bf5a61 - https://research.securitum.com/xss-in-amp4email-dom-clobbering - https://scnps.co/papers/sp23_domclob.pdf
CVE ID: CVE-2024-43789 State: PUBLISHED Published: 2024-10-07T20:24:32.007Z Last Updated: 2024-10-08T18:11:24.827Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: discourse Products: discourse Problem Types: CWE-400 Description: Discourse is an open source platform for community discussion. A user can create a post with many replies, and then attempt to fetch them all at once. This can potentially reduce the availability of a Discourse instance. This problem has been patched in the latest version of Discourse. All users area are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: Referen
grade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/discourse/discourse/security/advisories/GHSA-62cq-cpmc-hvqq
CVE ID: CVE-2024-43790 State: PUBLISHED Published: 2024-08-22T21:23:07.797Z Last Updated: 2024-09-20T16:03:12.105Z Severity: MEDIUM (CVSS 4.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: vim Products: vim Problem Types: CWE-122 Description: Vim is an open source command line text editor. When performing a search and displaying the search-count message is disabled (:set shm+=S), the search pattern is displayed at the bottom of the screen in a buffer (msgbuf). When right-left mode (:set rl) is enabled, the search pattern is reversed. This happens by allocating a new buffer. If the search pattern contains some ASCII NUL characters, the buffer allocated will be smaller than the origina
buffer. If the search pattern contains some ASCII NUL characters, the buffer allocated will be smaller than the original allocated buffer (because for allocating the reversed buffer, the strlen() function is called, which only counts until it notices an ASCII NUL byte ) and thus the original length indicator is wrong. This causes an overflow when accessing characters inside the msgbuf by the previously (now wrong) length of the msgbuf. The issue has been fixed as of Vim patch v9.1.0689. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/vim/vim/security/advisories/GHSA-v2x2-cjcg-f9jm - https://github.com/vim/vim/commit/cacb6693c10bb1
- https://github.com/vim/vim/security/advisories/GHSA-v2x2-cjcg-f9jm - https://github.com/vim/vim/commit/cacb6693c10bb19f28a50eca47bc
CVE ID: CVE-2024-43791 State: PUBLISHED Published: 2024-08-23T14:39:10.641Z Last Updated: 2024-08-23T18:10:50.671Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: steveklabnik Products: request_store Problem Types: CWE-276 Description: RequestStore provides per-request global storage for Rack. The files published as part of request_store 1.3.2 have 0666 permissions, meaning that they are world-writable, which allows local users to execute arbitrary code. This version was published in 2017, and most production environments do not allow access for local users, so the chances of this being exploited are very low, given that the vast majority of users will have up
for local users, so the chances of this being exploited are very low, given that the vast majority of users will have upgraded, and those that have not, if any, are not likely to be exposed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/steveklabnik/request_store/security/advisories/GHSA-frp2-5qfc-7r8m
CVE ID: CVE-2024-43792 State: PUBLISHED Published: 2024-09-02T16:15:40.485Z Last Updated: 2024-09-03T14:20:31.645Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: halo-dev Products: halo Problem Types: CWE-79 Description: Halo is an open source website building tool. A security vulnerability has been identified in versions prior to 2.17.0 of the Halo project. This vulnerability allows an attacker to execute malicious scripts in the user's browser through specific HTML and JavaScript code, potentially leading to a Cross-Site Scripting (XSS) attack. Users are advised to upgrade to version 2.17.0+. There are no known workarounds for this vulnerability. Addition
attack. Users are advised to upgrade to version 2.17.0+. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/halo-dev/halo/security/advisories/GHSA-x3rj-3x75-vw4g
CVE ID: CVE-2024-43793 State: PUBLISHED Published: 2024-09-11T14:37:57.666Z Last Updated: 2024-09-11T15:01:32.493Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: halo-dev Products: halo Problem Types: CWE-79 Description: Halo is an open source website building tool. A security vulnerability has been identified in versions prior to 2.19.0 of the Halo project. This vulnerability allows an attacker to execute malicious scripts in the user's browser through specific HTML and JavaScript code, potentially leading to a Cross-Site Scripting (XSS) attack. This vulnerability is fixed in 2.19.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
attack. This vulnerability is fixed in 2.19.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/halo-dev/halo/security/advisories/GHSA-28x9-hppj-m537
CVE ID: CVE-2024-43794 State: PUBLISHED Published: 2024-08-23T16:15:58.428Z Last Updated: 2024-08-23T17:01:06.990Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: opensearch-project Products: security-dashboards-plugin Problem Types: CWE-601 Description: OpenSearch Dashboards Security Plugin adds a configuration management UI for the OpenSearch Security features to OpenSearch Dashboards. Improper validation of the nextUrl parameter can lead to external redirect on login to OpenSearch-Dashboards for specially crafted parameters. A patch is available in 1.3.19 and 2.16.0 for this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://g
vailable in 1.3.19 and 2.16.0 for this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/opensearch-project/security-dashboards-plugin/security/advisories/GHSA-3fph-6cqp-5mfc - https://github.com/opensearch-project/security-dashboards-plugin/commit/fc4f6a27c0c80881be9e8ed6b9259a25c3fa0e13
CVE ID: CVE-2024-43795 State: PUBLISHED Published: 2024-10-02T19:13:02.062Z Last Updated: 2024-10-31T13:50:53.332Z Vendors: OpenC3 Products: cosmos Problem Types: CWE-79 Description: OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. The login functionality contains a reflected cross-site scripting (XSS) vulnerability. This vulnerability is fixed in 5.19.0. Note: This CVE only affects Open Source Edition, and not OpenC3 COSMOS Enterprise Edition. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/OpenC3/cosmos/security/advisories/GHSA-vfj8-5pj7-2f9g - https://github.com/OpenC3/cosmos/commit/
s: - https://github.com/OpenC3/cosmos/security/advisories/GHSA-vfj8-5pj7-2f9g - https://github.com/OpenC3/cosmos/commit/762d7e0e93bdc2f340b1e42acccedc78994a576e - https://securitylab.github.com/advisories/GHSL-2024-127_GHSL-2024-129_OpenC3_COSMOS
CVE ID: CVE-2024-43796 State: PUBLISHED Published: 2024-09-10T14:36:27.380Z Last Updated: 2024-09-10T15:58:45.956Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: expressjs Products: express Problem Types: CWE-79 Description: Express.js minimalist web framework for node. In express < 4.20.0, passing untrusted user input - even after sanitizing it - to response.redirect() may execute untrusted code. This issue is patched in express 4.20.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/expressjs/express/security/advisories/GHSA-qw6h-vgh9-j6wx - https://github.com/expressjs/express/commit/54271f69b511fea198471e6ff3400ab805d6b
urity/advisories/GHSA-qw6h-vgh9-j6wx - https://github.com/expressjs/express/commit/54271f69b511fea198471e6ff3400ab805d6b553
CVE ID: CVE-2024-43797 State: PUBLISHED Published: 2024-09-02T16:21:07.372Z Last Updated: 2024-09-03T14:18:32.336Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: advplyr Products: audiobookshelf Problem Types: CWE-22 Description: audiobookshelf is a self-hosted audiobook and podcast server. A non-admin user is not allowed to create libraries (or access only the ones they have permission to). However, the `LibraryController` is missing the check for admin user and thus allows a path traversal issue. Allowing non-admin users to write to any directory in the system can be seen as a form of path traversal. However, since it can be restricted to only admin permi
directory in the system can be seen as a form of path traversal. However, since it can be restricted to only admin permissions, fixing this is relatively simple and falls more into the realm of Role-Based Access Control (RBAC). This issue has been addressed in release version 2.13.0. All users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/advplyr/audiobookshelf/security/advisories/GHSA-gg56-vj58-g5mc - https://github.com/advplyr/audiobookshelf-ghsa-gg56-vj58-g5mc/pull/1 - https://github.com/advplyr/audiobookshelf/blob/1c0d6e9c670ebb1b6f1e427a4c4d9250a7fb9b80/server/controllers
g5mc/pull/1 - https://github.com/advplyr/audiobookshelf/blob/1c0d6e9c670ebb1b6f1e427a4c4d9250a7fb9b80/server/controllers/LibraryController.js#L43-L47
CVE ID: CVE-2024-43798 State: PUBLISHED Published: 2024-08-26T22:32:43.575Z Last Updated: 2024-08-27T13:06:11.097Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: jpillora Products: chisel Problem Types: CWE-306, CWE-1068 Description: Chisel is a fast TCP/UDP tunnel, transported over HTTP, secured via SSH. The Chisel server doesn't ever read the documented `AUTH` environment variable used to set credentials, which allows any unauthenticated user to connect, even if credentials were set. Anyone running the Chisel server that is using the `AUTH` environment variable to specify credentials to authenticate against is affected by this vulnerability. Chisel is often
` environment variable to specify credentials to authenticate against is affected by this vulnerability. Chisel is often used to provide an entrypoint to a private network, which means services that are gated by Chisel may be affected. Additionally, Chisel is often used for exposing services to the internet. An attacker could MITM requests by connecting to a Chisel server and requesting to forward traffic from a remote port. This issue has been addressed in release version 1.10.0. All users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jpillora/chisel/security/advisories/GHSA-
ional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jpillora/chisel/security/advisories/GHSA-38jh-8h67-m7mj
CVE ID: CVE-2024-43799 State: PUBLISHED Published: 2024-09-10T14:45:06.761Z Last Updated: 2025-11-03T19:30:41.760Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: pillarjs Products: send Problem Types: CWE-79 Description: Send is a library for streaming files from the file system as a http response. Send passes untrusted user input to SendStream.redirect() which executes untrusted code. This issue is patched in send 0.19.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/pillarjs/send/security/advisories/GHSA-m6fv-jmcg-4jfg - https://github.com/pillarjs/send/commit/ae4f2989491b392ae2ef3b0015a019770ae
nd/security/advisories/GHSA-m6fv-jmcg-4jfg - https://github.com/pillarjs/send/commit/ae4f2989491b392ae2ef3b0015a019770ae65d35
CVE ID: CVE-2024-43800 State: PUBLISHED Published: 2024-09-10T14:50:06.043Z Last Updated: 2024-09-10T19:08:02.494Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: expressjs Products: serve-static Problem Types: CWE-79 Description: serve-static serves static files. serve-static passes untrusted user input - even after sanitizing it - to redirect() may execute untrusted code. This issue is patched in serve-static 1.16.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/expressjs/serve-static/security/advisories/GHSA-cm22-4g7w-348p - https://github.com/expressjs/serve-static/commit/0c11fad159898cdc69fd9ab63269b72468ecaf6b - http
s/GHSA-cm22-4g7w-348p - https://github.com/expressjs/serve-static/commit/0c11fad159898cdc69fd9ab63269b72468ecaf6b - https://github.com/expressjs/serve-static/commit/ce730896fddce1588111d9ef6fdf20896de5c6fa
CVE ID: CVE-2024-43801 State: PUBLISHED Published: 2024-09-02T16:26:58.884Z Last Updated: 2024-09-03T19:16:00.791Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: jellyfin Products: jellyfin Problem Types: CWE-200 Description: Jellyfin is an open source self hosted media server. The Jellyfin user profile image upload accepts SVG files, allowing for a stored XSS attack against an admin user via a specially crafted malicious SVG file. When viewed by an admin outside of the Jellyfin Web UI (e.g. via "view image" in a browser), this malicious SVG file could interact with the browser's LocalStorage and retrieve an AccessToken, which in turn can be used in an API
VG file could interact with the browser's LocalStorage and retrieve an AccessToken, which in turn can be used in an API call to elevate the target user to a Jellyfin administrator. The actual attack vector is unlikely to be exploited, as it requires specific actions by the administrator to view the SVG image outside of Jellyfin's WebUI, i.e. it is not a passive attack. The underlying exploit mechanism is solved by PR #12490, which forces attached images (including the potential malicious SVG) to be treated as attachments and thus downloaded by browsers, rather than viewed. This prevents exploitation of the LocalStorage of the browser. This PR has been merged and the relevant code changes are
This prevents exploitation of the LocalStorage of the browser. This PR has been merged and the relevant code changes are included in release version 10.9.10. All users are advised to upgrade. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/jellyfin/jellyfin/security/advisories/GHSA-vcmh-9wx9-rfqh - https://github.com/jellyfin/jellyfin/pull/12490
CVE ID: CVE-2024-43802 State: PUBLISHED Published: 2024-08-26T18:48:11.979Z Last Updated: 2025-11-03T20:38:52.392Z Severity: MEDIUM (CVSS 4.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: vim Products: vim Problem Types: CWE-122 Description: Vim is an improved version of the unix vi text editor. When flushing the typeahead buffer, Vim moves the current position in the typeahead buffer but does not check whether there is enough space left in the buffer to handle the next characters. So this may lead to the tb_off position within the typebuf variable to point outside of the valid buffer size, which can then later lead to a heap-buffer overflow in e.g. ins_typebuf(). Therefore, when fl
of the valid buffer size, which can then later lead to a heap-buffer overflow in e.g. ins_typebuf(). Therefore, when flushing the typeahead buffer, check if there is enough space left before advancing the off position. If not, fall back to flush current typebuf contents. It's not quite clear yet, what can lead to this situation. It seems to happen when error messages occur (which will cause Vim to flush the typeahead buffer) in comnination with several long mappgins and so it may eventually move the off position out of a valid buffer size. Impact is low since it is not easily reproducible and requires to have several mappings active and run into some error condition. But when this happens,
ily reproducible and requires to have several mappings active and run into some error condition. But when this happens, this will cause a crash. The issue has been fixed as of Vim patch v9.1.0697. Users are advised to upgrade. There are no known workarounds for this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/vim/vim/security/advisories/GHSA-4ghr-c62x-cqfh - https://github.com/vim/vim/commit/322ba9108612bead5eb
CVE ID: CVE-2024-43803 State: PUBLISHED Published: 2024-09-03T18:56:29.607Z Last Updated: 2024-09-03T19:30:44.895Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: metal3-io Products: baremetal-operator Problem Types: CWE-200, CWE-653 Description: The Bare Metal Operator (BMO) implements a Kubernetes API for managing bare metal hosts in Metal3. The `BareMetalHost` (BMH) CRD allows the `userData`, `metaData`, and `networkData` for the provisioned host to be specified as links to Kubernetes Secrets. There are fields for both the `Name` and `Namespace` of the Secret, meaning that versions of the baremetal-operator prior to 0.8.0, 0.6.2, and 0.5.2 will read a `Se
mespace` of the Secret, meaning that versions of the baremetal-operator prior to 0.8.0, 0.6.2, and 0.5.2 will read a `Secret` from any namespace. A user with access to create or edit a `BareMetalHost` can thus exfiltrate a `Secret` from another namespace by using it as e.g. the `userData` for provisioning some host (note that this need not be a real host, it could be a VM somewhere). BMO will only read a key with the name `value` (or `userData`, `metaData`, or `networkData`), so that limits the exposure somewhat. `value` is probably a pretty common key though. Secrets used by _other_ `BareMetalHost`s in different namespaces are always vulnerable. It is probably relatively unusual for anyone
by _other_ `BareMetalHost`s in different namespaces are always vulnerable. It is probably relatively unusual for anyone other than cluster administrators to have RBAC access to create/edit a `BareMetalHost`. This vulnerability is only meaningful, if the cluster has users other than administrators and users' privileges are limited to their respective namespaces. The patch prevents BMO from accepting links to Secrets from other namespaces as BMH input. Any BMH configuration is only read from the same namespace only. The problem is patched in BMO releases v0.7.0, v0.6.2 and v0.5.2 and users should upgrade to those versions. Prior upgrading, duplicate the BMC Secrets to the namespace where the c
.5.2 and users should upgrade to those versions. Prior upgrading, duplicate the BMC Secrets to the namespace where the corresponding BMH is. After upgrade, remove the old Secrets. As a workaround, an operator can configure BMO RBAC to be namespace scoped for Secrets, instead of cluster scoped, to prevent BMO from accessing Secrets from other namespaces. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/metal3-io/baremetal-operator/security/advisories/GHSA-pqfh-xh7w-7h3p - https://github.com/metal3-io/baremetal-operator/pull/1929 - https://github.com/metal3-io/baremetal-operator/pull/1930 - https://github.com/metal3-io/baremetal-operator/pull/1931 - https://g