Threats affecting pkg:github/sealed-secrets

CVE-2026-59341 is a vulnerability in Bitnami sealed-secrets controller affecting unauthenticated POST endpoints. An attacker with internal network access can exploit template rendering in spec.template.data to decrypt sealed secrets by using the controller as a decryption oracle. The vulnerability arises from missing AEAD label binding and side-channel leaks via HTTP response codes. It requires access to the internal service port and affects versions up to 0.38.4.