github.com/bank-vaults/vault-secrets-webhook vulnerabilities (Go)

1 vulnerability.

• github.com/bank-vaults/vault-secrets-webhook Go vault-addr annotation SSRF -- webhook makes outbound HTTP call to attacker URL during admission; vault-serviceaccount enables cluster-wide SA token theft via TokenRequest API CVE-2026-54725 Fix available 9.6 CriticalJuly 31, 2026