CLEANSTART-2026-IQ87161 Security fixes in git-sync 4.4.3-r1

Package git-sync version 4.4.3-r1 fixes 1 vulnerabilities: CVE-2026-39824...

CLEANSTART-2026-VR80248 Security fixes in git-sync 4.6.0-r3

Package git-sync version 4.6.0-r3 fixes 1 vulnerabilities: CVE-2026-39824...

CLEANSTART-2026-VG12202 Security fixes in git-sync-fips 4.7.0-r2

Package git-sync-fips version 4.7.0-r2 fixes 1 vulnerabilities: CVE-2026-39824...

CLEANSTART-2026-XT27015 Security fixes in git-sync 4.7.0-r3

Package git-sync version 4.7.0-r3 fixes 1 vulnerabilities: CVE-2026-39824...

CLEANSTART-2026-RJ61585 Security fixes in git-sync 4.5.1-r1

Package git-sync version 4.5.1-r1 fixes 10 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2025-61726, CVE-2025-61728, CVE-2025-68119...

CVE-2026-53535

Activepieces is an open source AI workflow automation platform. Prior to 0.82.0, the git-sync feature clones a user-configured Git repository into a temporary directory on the server and then writes flow, table, and connection state into it before pushing back, and two separate weaknesses allowed...

CVE-2026-53535

Activepieces is an open source AI workflow automation platform. Prior to 0.82.0, the git-sync feature clones a user-configured Git repository into a temporary directory on the server and then writes flow, table, and connection state into it before pushing back, and two separate weaknesses allowed...

CVE-2026-53535

Activepieces prior to 0.82.0 is affected by an arbitrary file write in the git-sync workflow. The issue occurs because git-sync clones a configured repository into a temporary server directory with Git’s symbolic-link handling enabled, allowing symlinks to redirect writes. Additionally, on-disk i...

CVE-2026-53535 Activepieces: Arbitrary file write in git-sync via path traversal and symlinks

Activepieces is an open source AI workflow automation platform. Prior to 0.82.0, the git-sync feature clones a user-configured Git repository into a temporary directory on the server and then writes flow, table, and connection state into it before pushing back, and two separate weaknesses allowed...

EUVD-2026-45028

Activepieces is an open source AI workflow automation platform. Prior to 0.82.0, the git-sync feature clones a user-configured Git repository into a temporary directory on the server and then writes flow, table, and connection state into it before pushing back, and two separate weaknesses allowed...

CVE-2026-53535 Activepieces: Arbitrary file write in git-sync via path traversal and symlinks

Activepieces is an open source AI workflow automation platform. Prior to 0.82.0, the git-sync feature clones a user-configured Git repository into a temporary directory on the server and then writes flow, table, and connection state into it before pushing back, and two separate weaknesses allowed...

CVE-2026-53535 Activepieces: Arbitrary file write in git-sync via path traversal and symlinks

Activepieces is an open source AI workflow automation platform. Prior to 0.82.0, the git-sync feature clones a user-configured Git repository into a temporary directory on the server and then writes flow, table, and connection state into it before pushing back, and two separate weaknesses allowed...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: flux-notification-controller, buildah, cue, docker-machine-driver-linode, github-mcp-server, nova, spire-controller-manager, podman, nri-kafka, knative-eventing, boring-registry, net-kourier, configmap-reload, mongo-tools, pgtimetable, hugo, kubebuilder,...

CLEANSTART-2026-ZW73167 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 4.5.1-r1

Multiple security vulnerabilities affect the git-sync package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: octo-sts, timestamp-authority, atlantis, policy-controller-fips, kaniko-fips, terragrunt, tkn, thanos, git-sync-fips, chartmuseum, goreleaser, splunk-otel-collector, cosign, terraform, kyverno-notation-aws, thanos-fips, opencost, sftpgo-plugin-kms, git-sync,...