CVE-2026-87064

A flaw was found in konflux-operator-tasks. The GitHub workflows used by this component do not explicitly define their required permissions. This oversight means the workflows may inherit default access tokens that grant broader privileges than intended. Such excessive permissions could potential...

CVE-2026-73558

creationtimestamp| type| source ---|---|--- 2026-09-08 22:36:07+00:00| published-proof-of-concept| https://github.com/vllm-project/vllm/security/advisories/GHSA-7m6h-x95x-82q5...

CVE-2026-83605

creationtimestamp| type| source ---|---|--- 2026-09-08 22:36:00+00:00| published-proof-of-concept| https://github.com/xmldom/xmldom/security/advisories/GHSA-4w3w-2rp5-g8jm...

CVE-2026-83607

creationtimestamp| type| source ---|---|--- 2026-09-08 22:35:58+00:00| published-proof-of-concept| https://github.com/xmldom/xmldom/security/advisories/GHSA-w2rr-34g9-rvrj...

CVE-2026-83606

creationtimestamp| type| source ---|---|--- 2026-09-08 22:35:56+00:00| published-proof-of-concept| https://github.com/xmldom/xmldom/security/advisories/GHSA-g53g-w8rj-fmg7...

CVE-2026-76217

creationtimestamp| type| source ---|---|--- 2026-09-08 22:35:54+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-hh9p-6wh2-4mfc...

CVE-2026-76218

creationtimestamp| type| source ---|---|--- 2026-09-08 22:35:52+00:00| published-proof-of-concept| https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-9rj7-rf2p-w77r...

CVE-2026-76222

creationtimestamp| type| source ---|---|--- 2026-09-08 22:35:44+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-hmq2-w58f-27jc...

CVE-2026-49114

creationtimestamp| type| source ---|---|--- 2026-09-08 22:35:42+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-q56x-g2fj-4rj6...

CVE-2026-83614

creationtimestamp| type| source ---|---|--- 2026-09-08 22:35:35+00:00| published-proof-of-concept| https://github.com/xmldom/xmldom/security/advisories/GHSA-93r5-fhx6-vmg9...

CVE-2026-83615

creationtimestamp| type| source ---|---|--- 2026-09-08 22:35:32+00:00| published-proof-of-concept| https://github.com/xmldom/xmldom/security/advisories/GHSA-965w-775f-mr7g...

CVE-2026-83613

creationtimestamp| type| source ---|---|--- 2026-09-08 22:35:28+00:00| published-proof-of-concept| https://github.com/xmldom/xmldom/security/advisories/GHSA-8344-3jmq-59r6...

CVE-2026-83611

creationtimestamp| type| source ---|---|--- 2026-09-08 22:35:21+00:00| published-proof-of-concept| https://github.com/xmldom/xmldom/security/advisories/GHSA-6h8r-xr42-gp59...

CVE-2026-83618

creationtimestamp| type| source ---|---|--- 2026-09-08 22:35:19+00:00| published-proof-of-concept| https://github.com/xmldom/xmldom/security/advisories/GHSA-vr34-hp96-76pp...

CVE-2026-83609

creationtimestamp| type| source ---|---|--- 2026-09-08 22:35:17+00:00| published-proof-of-concept| https://github.com/xmldom/xmldom/security/advisories/GHSA-3px3-54cx-rmw9...

CVE-2026-83608

creationtimestamp| type| source ---|---|--- 2026-09-08 22:35:14+00:00| published-proof-of-concept| https://github.com/xmldom/xmldom/security/advisories/GHSA-27p8-2357-5qqv...

CVE-2026-83617

creationtimestamp| type| source ---|---|--- 2026-09-08 22:35:12+00:00| published-proof-of-concept| https://github.com/xmldom/xmldom/security/advisories/GHSA-jxjr-3g7g-3944...

CVE-2026-84308

creationtimestamp| type| source ---|---|--- 2026-09-08 22:35:07+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-q97c-8qh3-fpc6...

CVE-2026-87062

A flaw was found in konflux-operator-tasks. GitHub Actions within this component are configured to use mutable tags or branches instead of specific, immutable commit SHAs. This vulnerability could allow a remote attacker to introduce malicious code into the build process if they compromise the...

CVE-2026-87050

A flaw was found in operator-foundry. GitHub Actions and reusable workflows within the component are referenced using mutable tags e.g., @v0, @v4 instead of fixed commit SHAs. This allows an attacker to potentially alter the code executed in the Continuous Integration CI pipeline through an...