CVE-2026-93326

A flaw was found in BuildKit. An attacker with the ability to define build steps can bypass policy validation rules by supplying a specially crafted Git source. During a clone operation, this issue allows the repository to spoof its remote URL, making untrusted source code appear to originate fro...

world_conqueror_4_ru

World Conqueror 4 — русский перевод и мод CMake-пайплайн: распаковывает оригинальный APK, применяет патчи и собирает подписанную русскую сборку игры. Что это Из оригинального APK World Conqueror 4 собирается русская сборка: игра декомпилируется, ресурсы расшифровываются, применяются выбранные...

CVE-2026-87057

A flaw was found in olm-operator-konflux-sample. The build pipelines use mutable floating tags to reference runtime base images instead of immutable SHA256 digests. This configuration allows for the content of the base images to be altered without detection, potentially leading to the introductio...

EUVD-2026-70217

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. From version 1.6.19 to before version 1.17.2, Nuclio's Dashboard build pipeline does not sanitize the spec.build.tempDir field before using it to construct a shell command. When the Kaniko container builder is enabled, a...

CVE-2026-76139

The acm-operator-bundle build process executes an unpinned script from stolostrum/release@master using full build credentials (GitHub tokens, registry passwords) without verifying authenticity or integrity. A remote attacker controlling that script could inject malicious code, gaining unauthorize...

CVE-2026-75926

Hugo 0.161.0 placed the Node asset pipelines behind the Node.js permission model so that code running through PostCSS, Babel, or TailwindCSS could not reach the file system outside the project directory. Hugo 0.162.0 added tailwindcss to the AllowChildProcess default in...

world_conqueror_4_ru v1.28.0_ru

World Conqueror 4 — русский перевод и мод CMake-пайплайн: распаковывает оригинальный APK, применяет патчи и собирает подписанную русскую сборку игры. Что это Из оригинального APK World Conqueror 4 собирается русская сборка: игра декомпилируется, ресурсы расшифровываются, применяются выбранные...

GHSA-25MV-J2QR-V5JQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatchevents-fips, crossplane-provider-aws-backup, clickhouse-backup, fortio-fips, kube-rbac-proxy-fips, kubernetes-csi-external-attacher-fips, kubernetes-dashboard-auth-fips, aws-flb-kinesis-fips, external-dns-fips, rancher-system-agent,...

MAL-2026-14049 Malicious code in @mexc/shared-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d793d1ff65b7f5a24e1aa0c176eaa5d83c7870e05cca5b64f22edb9ca7ded7 Package published to the public npm registry under the @mexc scope without evidence of scope ownership. package.json declares a postinstall hook...

CVE-2026-72885

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, dockerContextPath accepted by apps/dokploy/components/dashboard/application/build/show.tsx flows through getDockerContextPath in packages/server/src/utils/filesystem/directory.ts into the unquoted cd command in...

CVE-2026-48192

A vulnerability has been identified in Mendix Studio Pro 10.11 All versions, Mendix Studio Pro 10.12 All versions, Mendix Studio Pro 10.13 All versions, Mendix Studio Pro 10.14 All versions, Mendix Studio Pro 10.15 All versions, Mendix Studio Pro 10.16 All versions, Mendix Studio Pro 10.17 All...

CVE-2026-48192

A vulnerability has been identified in Mendix Studio Pro 10.11 All versions, Mendix Studio Pro 10.12 All versions, Mendix Studio Pro 10.13 All versions, Mendix Studio Pro 10.14 All versions, Mendix Studio Pro 10.15 All versions, Mendix Studio Pro 10.16 All versions, Mendix Studio Pro 10.17 All...

CVE-2026-48192

A vulnerability has been identified in Mendix Studio Pro 10.11 All versions, Mendix Studio Pro 10.12 All versions, Mendix Studio Pro 10.13 All versions, Mendix Studio Pro 10.14 All versions, Mendix Studio Pro 10.15 All versions, Mendix Studio Pro 10.16 All versions, Mendix Studio Pro 10.17 All...

CVE-2026-48192

A vulnerability has been identified in Mendix Studio Pro 10.11 All versions, Mendix Studio Pro 10.12 All versions, Mendix Studio Pro 10.13 All versions, Mendix Studio Pro 10.14 All versions, Mendix Studio Pro 10.15 All versions, Mendix Studio Pro 10.16 All versions, Mendix Studio Pro 10.17 All...

EUVD-2026-40330

A vulnerability has been identified in Mendix Studio Pro 10.11 All versions, Mendix Studio Pro 10.12 All versions, Mendix Studio Pro 10.13 All versions, Mendix Studio Pro 10.14 All versions, Mendix Studio Pro 10.15 All versions, Mendix Studio Pro 10.16 All versions, Mendix Studio Pro 10.17 All...

CVE-2026-48192

CVE-2026-48192 affects Mendix Studio Pro across multiple versions (10.x and 11.x) with a flaw where built project files are not properly validated/sanitized during the build pipeline. An attacker could trick a user into opening and running a specially crafted malicious project locally, potentiall...

Malicious code in simple-node-calc-c (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 289de4cd84a2ac40ef42f8b449ba58e9d8900d766a0638061ef2e75092b1f1a4 Package advertises itself as a 7-function calculator but ships an undeclared 87KB heavily obfuscated file lodash-compiler.js obfuscator.io string-arr...

org.jenkins-ci.main:jenkins-test-harness (1.554.2), org.jenkins-ci.main:jenkins-war (1.554.2) +6 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (1.554.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.554.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.554.2 - org.jenkins-ci.main:jenkins-war 1.554.2 -...

org.jenkins-ci.main:jenkins-test-harness (1.521), org.jenkins-ci.main:jenkins-war (1.521) +9 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (1.521)

org.jenkins-ci.main:jenkins-core MAVEN version 1.521 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.521 - org.jenkins-ci.main:jenkins-war 1.521 -...

org.jenkins-ci.main:jenkins-test-harness (1.554.2), org.jenkins-ci.main:jenkins-war (1.554.2) +6 more potentially affected by CVE-2026-53437 via org.jenkins-ci.main:jenkins-core (1.554.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.554.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.554.2 - org.jenkins-ci.main:jenkins-war 1.554.2 -...