Sandboxie

Sandboxie Plus / Classic EN | 中文 System requirements| Release notes| Contribution guidelines| Security policy| Code of Conduct ---|---|---|---|--- Windows 7 or higher 64-bit| CHANGELOG.md| CONTRIBUTING.md| SECURITY.md| CODEOFCONDUCT.md Sandboxie is a sandbox-based isolation software for Windows...

OpenSC

OpenSC documentation Wiki is available online Please take a look at the documentation before trying to use OpenSC. Build and test status of specific cards: Cards| Status ---|--- CAC| Coolkey|...

authelia

!OpenSSF Scorecardhttps://shieldcn.dev/badge/dynamic/json.svg?url=https://img.shields.io/ossf-scorecard/github.com/authelia/authelia.json&query=$.message&label=openssf%20scorecard&logo=data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmc...

EUVD-2026-40442

Capgo before 12.128.2 lacks an UPDATE row-level security policy for the buildrequests table, preventing API-key and anonymous access from persisting builder status updates. Attackers can exploit this missing policy to cause build status and error details to remain unpersisted, leaving buildreques...

CVE-2026-56334: Improper Access Control

Capgo before 12.128.2 lacks an UPDATE row-level security policy for the buildrequests table, preventing API-key and anonymous access from persisting builder status updates. Attackers can exploit this missing policy to cause build status and error details to remain unpersisted, leaving buildreques...

org.jenkins-ci.plugins:embeddable-build-status (>=2.0-beta1, <=2.0.4) potentially affected by CVE-2026-57281 via org.jenkins-ci.plugins:script-security (1.49)

org.jenkins-ci.plugins:script-security MAVEN version 1.49 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:embeddable-build-status =2.0-beta1, =2.0.4 Source cves:...

org.jenkins-ci.plugins:embeddable-build-status (>=2.0-beta1, <=2.0.4) potentially affected by CVE-2026-57280 via org.jenkins-ci.plugins:script-security (1.49)

org.jenkins-ci.plugins:script-security MAVEN version 1.49 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:embeddable-build-status =2.0-beta1, =2.0.4 Source cves:...

CVE-2026-56229

Capgo before 12.128.2 contains an authorization bypass vulnerability in the /build/status and /build/logs endpoints that allows attackers to access build jobs belonging to different applications by supplying a mismatched appid and jobid combination. Limited API keys restricted to a single app can...

CVE-2026-56229

Capgo before 12.128.2 has an authorization bypass in /build/status and /build/logs that lets an attacker access build jobs from other apps by mixing app_id and job_id. Limited API keys scoped to one app can read status/logs across apps by using an authorized app_id with a job_id from another app,...

CVE-2026-56229 Capgo - Cross-App Build Job Access via app_id/job_id Mismatch in /build/status and /build/logs

Capgo before 12.128.2 contains an authorization bypass vulnerability in the /build/status and /build/logs endpoints that allows attackers to access build jobs belonging to different applications by supplying a mismatched appid and jobid combination. Limited API keys restricted to a single app can...

CVE-2026-56229 Capgo - Cross-App Build Job Access via app_id/job_id Mismatch in /build/status and /build/logs

Capgo before 12.128.2 contains an authorization bypass vulnerability in the /build/status and /build/logs endpoints that allows attackers to access build jobs belonging to different applications by supplying a mismatched appid and jobid combination. Limited API keys restricted to a single app can...

CVE-2026-56229 Capgo - Cross-App Build Job Access via app_id/job_id Mismatch in /build/status and /build/logs

Capgo before 12.128.2 contains an authorization bypass vulnerability in the /build/status and /build/logs endpoints that allows attackers to access build jobs belonging to different applications by supplying a mismatched appid and jobid combination. Limited API keys restricted to a single app can...

CVE-2026-56229

Capgo before 12.128.2 contains an authorization bypass vulnerability in the /build/status and /build/logs endpoints that allows attackers to access build jobs belonging to different applications by supplying a mismatched appid and jobid combination. Limited API keys restricted to a single app can...

EUVD-2026-38164

Capgo before 12.128.2 contains an authorization bypass vulnerability in the /build/status and /build/logs endpoints that allows attackers to access build jobs belonging to different applications by supplying a mismatched appid and jobid combination. Limited API keys restricted to a single app can...

PT-2026-51218

Name of the Vulnerable Software and Affected Versions Capgo versions prior to 12.128.2 Description An authorization bypass exists in the '/build/status' and '/build/logs' endpoints. Attackers can access build jobs belonging to different applications by providing a mismatched app id and job id...

net.sleepymouse.jenkins.plugins:rpi-build-status (0.7), org.jenkins-ci.main:jenkins-war (1.658) +2 more potentially affected by CVE-2026-53436 via org.jenkins-ci.main:jenkins-core (1.658)

org.jenkins-ci.main:jenkins-core MAVEN version 1.658 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - net.sleepymouse.jenkins.plugins:rpi-build-status 0.7 - org.jenkins-ci.main:jenkins-war 1.658 -...

net.sleepymouse.jenkins.plugins:rpi-build-status (0.7), org.jenkins-ci.main:jenkins-war (1.658) +2 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.658)

org.jenkins-ci.main:jenkins-core MAVEN version 1.658 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - net.sleepymouse.jenkins.plugins:rpi-build-status 0.7 - org.jenkins-ci.main:jenkins-war 1.658 -...

net.sleepymouse.jenkins.plugins:rpi-build-status (0.7), org.jenkins-ci.main:jenkins-war (1.658) +2 more potentially affected by CVE-2026-53442 via org.jenkins-ci.main:jenkins-core (1.658)

org.jenkins-ci.main:jenkins-core MAVEN version 1.658 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - net.sleepymouse.jenkins.plugins:rpi-build-status 0.7 - org.jenkins-ci.main:jenkins-war 1.658 -...

net.sleepymouse.jenkins.plugins:rpi-build-status (0.7), org.jenkins-ci.main:jenkins-war (1.658) +2 more potentially affected by CVE-2026-53440 via org.jenkins-ci.main:jenkins-core (1.658)

org.jenkins-ci.main:jenkins-core MAVEN version 1.658 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - net.sleepymouse.jenkins.plugins:rpi-build-status 0.7 - org.jenkins-ci.main:jenkins-war 1.658 -...

net.sleepymouse.jenkins.plugins:rpi-build-status (0.7), org.jenkins-ci.main:jenkins-war (1.658) +2 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (1.658)

org.jenkins-ci.main:jenkins-core MAVEN version 1.658 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - net.sleepymouse.jenkins.plugins:rpi-build-status 0.7 - org.jenkins-ci.main:jenkins-war 1.658 -...