Arbitrary Argument Injection

Overview Affected versions of this package are vulnerable to Arbitrary Argument Injection through gitSourceHandler.checkoutAsBundle in source/git/bundle.go and getDefaultBranch in source/git/source.go. An attacker can trigger crafted host-side git command arguments by supplying a malicious Git...

CVE-2026-47410

creationtimestamp| type| source ---|---|--- 2026-07-21 17:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6djsm3uo2q 2026-07-21 19:10:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6j63qcax23...

CVE-2026-16493

The CVE-2026-16493 entry describes a command-injection vulnerability in ansible-core where _extract_collection_from_git() builds git clone commands without a proper end-of-options separator, allowing an attacker to craft a collection source URI that injects payloads during ansible-galaxy collecti...

CVE-2026-15793

BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when checking out Git sources. If the Git source is malicious, this could lead to a crafted command invocation on the host...

CVE-2026-15793

BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when checking out Git sources. If the Git source is malicious, this could lead to a crafted command invocation on the host...

CVE-2026-64825

creationtimestamp| type| source ---|---|--- 2026-07-21 16:42:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6atzcqtu2s...

CVE-2026-64824

creationtimestamp| type| source ---|---|--- 2026-07-21 16:42:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6atxxzj32y 2026-08-10 14:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/97436 2026-08-11 00:00:07+00:00| published-proof-of-concept|...

CVE-2026-28317

creationtimestamp| type| source ---|---|--- 2026-07-21 16:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6aqfnokm2v 2026-07-21 17:02:37+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mr6byq6dsr2o 2026-07-26 15:37:07+00:00| seen|...

CVE-2026-28316

creationtimestamp| type| source ---|---|--- 2026-07-21 16:38:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6amuchyj2a 2026-08-11 18:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mst7fejbrg2e...

CVE-2026-28314

creationtimestamp| type| source ---|---|--- 2026-07-21 16:38:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6amsva4r23 2026-07-26 17:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrkwayrphp26...

CVE-2026-16447

creationtimestamp| type| source ---|---|--- 2026-07-21 16:37:59+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mr6amohkrb2g...

cargo: Cargo: Source code overwrite due to symlink mishandling in third-party registries

A flaw was found in Cargo. When processing crate tarballs from third-party registries, Cargo mishandled symbolic links symlinks embedded within these archives. This vulnerability enables a malicious crate to overwrite the source code of another crate originating from the same registry. Such an...

CVE-2026-28313

creationtimestamp| type| source ---|---|--- 2026-07-21 16:36:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6ajcpvl42q 2026-07-26 17:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrkuldwnwd2s...

CVE-2026-28312

creationtimestamp| type| source ---|---|--- 2026-07-21 16:36:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6ajbif3b23 2026-07-26 16:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrksvpexrs23...

CVE-2026-28310

creationtimestamp| type| source ---|---|--- 2026-07-21 16:34:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6afpcpwm2q 2026-07-26 21:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrldo4thtn23...

CVE-2026-28308

creationtimestamp| type| source ---|---|--- 2026-07-21 16:32:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6ac5ttqj2v 2026-07-26 20:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrlacu7ll72l...

CVE-2026-28306

creationtimestamp| type| source ---|---|--- 2026-07-21 16:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6a6ldxen24 2026-07-26 19:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrl4xkp7un23...

CVE-2026-28305

creationtimestamp| type| source ---|---|--- 2026-07-21 16:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6a6k36ek2s 2026-07-26 19:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrl3bvzuid2y...

CVE-2026-28304

creationtimestamp| type| source ---|---|--- 2026-07-21 16:28:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6a2yshpb2v 2026-07-26 18:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrkzmbga6l23...

CVE-2026-28302

creationtimestamp| type| source ---|---|--- 2026-07-21 16:28:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6a2xgjpu2r 2026-07-26 22:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrlfdry56g2y...