Threats tagged 'ghsa-h773-7gf7-9m2x'

NeuVector versions prior to 5.4.7 contain a hard-coded cryptographic key embedded in the binary, used to encrypt sensitive configuration data. This static key approach poses a security risk as the key is fixed and potentially exposed. The issue is resolved in version 5.4.7 and later, where NeuVector uses a dynamically generated encryption key stored securely as a Kubernetes secret, improving key management and security. There is no workaround; users must upgrade to a fixed version.