Our vulnerabilities reporting process is at https://voxpupuli.org/security/
Repository navigation
Security: voxpupuli/openvox-ca
Security
SECURITY.md
-
PostgreSQL backend: documented sslmode=require does not authenticate the server, and sql_tls_ca_file cannot complete a handshakeGHSA-xxmp-x77j-mc26 published
Oct 13, 2026 by bootcModerate -
Helm chart: Kubernetes export with rbac.scope ClusterRole grants cluster-wide Secret createGHSA-p7pm-55hm-m74j published
Oct 13, 2026 by bootcHigh -
CA key passphrase is passed to the network-facing frontend processGHSA-rv6w-8qqv-7v6p published
Oct 13, 2026 by bootcModerate -
OpenBao signer honours BAO_*/VAULT_* environment, including SKIP_VERIFY and proxy settingsGHSA-v745-5q22-55f6 published
Oct 13, 2026 by bootcModerate -
Unauthenticated client can replace a pending CSR before an operator signs itGHSA-5g5r-vg6r-jhxq published
Oct 13, 2026 by bootcModerate -
With allow_subject_alt_names enabled, any enrolled agent can add new DNS SANs at CSR renewal without operator reviewGHSA-2vpj-96q8-p9j5 published
Oct 13, 2026 by bootcModerate
Learn more about advisories related to voxpupuli/openvox-ca in the GitHub Advisory Database