2248 matches found
CVE-2026-103754 Ansible-runner: ansible-runner: path traversal and symlink escape in unstream_dir() allows file write outside the target directory
A flaw was found in ansible-runner. The unstreamdir function, which receives and extracts a streamed zip archive on the worker side of the ansible-runner transmit/worker protocol, re-creates symbolic links from archive content without validating the link target and applies chmod and utime to an...
CVE-2026-103754
A flaw was found in ansible-runner. The unstreamdir function, which receives and extracts a streamed zip archive on the worker side of the ansible-runner transmit/worker protocol, re-creates symbolic links from archive content without validating the link target and applies chmod and utime to an...
CVE-2026-103754
A flaw in ansible-runner 's unstream_dir() function allows for path traversal and symlink escape during the extraction of a streamed zip archive. The vulnerability exists because the function fails to validate symbolic link targets and applies chmod() and utime() to unsanitized filesystem paths d...
CVE-2026-103754
A flaw was found in ansible-runner. The unstreamdir function, which receives and extracts a streamed zip archive on the worker side of the ansible-runner transmit/worker protocol, re-creates symbolic links from archive content without validating the link target and applies chmod and utime to an...
CLEANSTART-2025-WF62094 Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3
Security vulnerability affects the gitlab-runner package. Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3...
CVE-2026-101912 vulnerabilities
Vulnerabilities for packages: homepage, commercial-gitlab-rails-ee-fips, renovate, kibana, opensearch-dashboards, librechat, actions-runner, commercial-gitlab-rails-ee, tileserver-gl-fips, langfuse, unleash-proxy, code-server, sqlpad, graalvm, wazuh-dashboard, opensearch-dashboards-fips,...
CVE-2026-102278 vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, jupyter-base-notebook, renovate, kibana, unleash-fips, opensearch-dashboards, tensorflow-gpu-jupyter, verdaccio, actions-runner, unleash, rancher-api-ui, commercial-gitlab-rails-ee, tileserver-gl-fips, nextcloud-server, langfuse,...
CVE-2026-19534 vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee, homepage, commercial-gitlab-rails-ee-fips, renovate, kibana, prism, lerna, code-server, actions-runner, npm...
GHSA-H3MG-XC3C-68PW vulnerabilities
Vulnerabilities for packages: homepage, commercial-gitlab-rails-ee-fips, renovate, kibana, opensearch-dashboards, librechat, actions-runner, commercial-gitlab-rails-ee, tileserver-gl-fips, langfuse, unleash-proxy, code-server, sqlpad, graalvm, wazuh-dashboard, opensearch-dashboards-fips,...
GHSA-Q2HR-2G5M-VWHR vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, jupyter-base-notebook, renovate, kibana, unleash-fips, opensearch-dashboards, tensorflow-gpu-jupyter, verdaccio, actions-runner, unleash, rancher-api-ui, commercial-gitlab-rails-ee, tileserver-gl-fips, nextcloud-server, langfuse,...
CVE-2026-101911 vulnerabilities
Vulnerabilities for packages: homepage, commercial-gitlab-rails-ee-fips, renovate, kibana, opensearch-dashboards, librechat, actions-runner, commercial-gitlab-rails-ee, tileserver-gl-fips, langfuse, unleash-proxy, code-server, sqlpad, graalvm, wazuh-dashboard, opensearch-dashboards-fips,...
CVE-2026-102277 vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, jupyter-base-notebook, renovate, kibana, unleash-fips, opensearch-dashboards, tensorflow-gpu-jupyter, verdaccio, actions-runner, unleash, rancher-api-ui, commercial-gitlab-rails-ee, tileserver-gl-fips, nextcloud-server, langfuse,...
GHSA-J6R3-76F7-8JCV vulnerabilities
Vulnerabilities for packages: homepage, commercial-gitlab-rails-ee-fips, renovate, kibana, opensearch-dashboards, librechat, actions-runner, commercial-gitlab-rails-ee, tileserver-gl-fips, langfuse, unleash-proxy, code-server, sqlpad, graalvm, wazuh-dashboard, opensearch-dashboards-fips,...
GHSA-QHR7-859C-M2P7 vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, jupyter-base-notebook, renovate, kibana, unleash-fips, opensearch-dashboards, tensorflow-gpu-jupyter, verdaccio, actions-runner, unleash, rancher-api-ui, commercial-gitlab-rails-ee, tileserver-gl-fips, nextcloud-server, langfuse,...
GHSA-R53P-7PC4-XJ5R vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee, homepage, commercial-gitlab-rails-ee-fips, renovate, kibana, prism, lerna, code-server, actions-runner, npm...
GHSA-RFGV-XXQX-MFG5 vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee, homepage, commercial-gitlab-rails-ee-fips, renovate, kibana, prism, lerna, code-server, actions-runner, npm...
CVE-2026-18540 vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee, homepage, commercial-gitlab-rails-ee-fips, renovate, kibana, prism, lerna, code-server, actions-runner, npm...
CVE-2026-103754: Improper Limitation of a Pathname to a Restricted Directory
A flaw was found in ansible-runner. The unstreamdir function, which receives and extracts a streamed zip archive on the worker side of the ansible-runner transmit/worker protocol, re-creates symbolic links from archive content without validating the link target and applies chmod and utime to an...
PT-2026-103842
A flaw was found in ansible-runner. The unstream dir function, which receives and extracts a streamed zip archive on the worker side of the ansible-runner transmit/worker protocol, re-creates symbolic links from archive content without validating the link target and applies chmod and utime to an...
gllm-core-binary (>=0.0.0.dev0, <=0.4.4b3), gllm-inference-binary (0.5.51b3) +5 more potentially affected by CVE-2026-102930 via virtualenv (20.30.0)
virtualenv PYPI version 20.30.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - gllm-core-binary =0.0.0.dev0, =0.3.149, =0.1.0, =1.0.51, =0.4.4, =0.4.8 Source cves: CVE-2026-102930 Source advisory: OSV:GHSA-94P9-XGH2-X...