Search results

CVE-2026-39821 - golang.org/x/net

Status: Open.

#2203 In getsops/sops;

· stelagasi opened on Jun 2, 2026

CVE-2026-39834 - golang.org/x/crypto

Status: Open.

#2202 In getsops/sops;

· stelagasi opened on Jun 2, 2026

CVE-2026-39833 - golang.org/x/crypto

Status: Open.

#2201 In getsops/sops;

· stelagasi opened on Jun 2, 2026

CVE-2026-39832 - golang.org/x/crypto

Status: Open.

#2200 In getsops/sops;

· stelagasi opened on Jun 2, 2026

CVE-2026-42508 - golang.org/x/crypto

Status: Open.

#2199 In getsops/sops;

· stelagasi opened on Jun 2, 2026

CVE-2026-46595 - golang.org/x/crypto

Status: Open.

#2198 In getsops/sops;

· stelagasi opened on Jun 2, 2026

v3.13.0 regression: can't decrypt INI files written by earlier versions; DecodeNewLines was dropped in #2120

bug

stores/ini

Status: Open.

#2188 In getsops/sops;

· ojsef39 opened on May 22, 2026

decrypt API lacks context.Context support: slow KMS round-trips cannot be cancelled mid-call

area/keyservice

enhancement

Status: Open.

#2179 In getsops/sops;

· trendvidia opened on May 11, 2026

·  

Discussions (architecture, long-term decisions)

[Feature Request]: Add "generic" KMS support via KMIP Provider

area/keyservice

enhancement

Status: Open.

#2170 In getsops/sops;

· nickgarber opened on May 3, 2026

FR: Hashicorp Vault Token File Environment Variable`

Status: Open.

#2168 In getsops/sops;

· Dexmachi opened on May 3, 2026

SOPS_AGE_KEY_FILE not being able to read from file descriptors in SSS setups

enhancement

keyservice/age

Status: Open.

#2162 In getsops/sops;

· Dexmachi opened on Apr 29, 2026

Silent value corruption: YAML scalars with underscore-separated digits are mangled on round-trip

enhancement

not-a-bugSOPS behaves as designed, though apparently not as the user expectedSOPS behaves as designed, though apparently not as the user expected

stores/yaml

Status: Open.

#2161 In getsops/sops;

· joelgriffiths opened on Apr 27, 2026