PT-2026-45857

Name of the Vulnerable Software and Affected Versions BrowserStack Runner versions prior to 0.9.6 Description An issue in the / log HTTP handler allows unauthenticated network-adjacent attackers to execute arbitrary code on the host system. The handler processes JSON request bodies by passing...

cyanide

Cyanide By @zeroxjf — an iOS...

GHSA-WGQ9-QP63-G8J3 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GHSA-R38R-HVG8-XQHF vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GHSA-5P55-QCQV-882W vulnerabilities

Vulnerabilities for packages: gitlab-runner...

CVE-2026-1402 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

CVE-2026-8716 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

CVE-2026-6713 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

GHSA-R38R-HVG8-XQHF vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-runner, gitlab-runner-fips, gitlab-cng, gitlab-cng-fips, gitlab-rails-ce-fips...

GHSA-WGQ9-QP63-G8J3 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-runner, gitlab-runner-fips, gitlab-cng, gitlab-cng-fips, gitlab-rails-ce-fips...

CVE-2026-6713 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-runner, gitlab-runner-fips, gitlab-cng, gitlab-cng-fips, gitlab-rails-ce-fips...

GHSA-5P55-QCQV-882W vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-runner, gitlab-runner-fips, gitlab-cng, gitlab-cng-fips, gitlab-rails-ce-fips...

CVE-2026-8716 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-runner, gitlab-runner-fips, gitlab-cng, gitlab-cng-fips, gitlab-rails-ce-fips...

CVE-2026-1402 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-runner, gitlab-runner-fips, gitlab-cng, gitlab-cng-fips, gitlab-rails-ce-fips...

CVE-2026-4868 Authorization Bypass Through User-Controlled Key in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 18.8 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that, under certain conditions, could have allowed an authenticated user to cause specific Duo AI workflows to run under another user's identity due to imprope...

CVE-2026-5817

The vllm-metal inference backend in Docker Model Runner on macOS unconditionally sets trustremotecode=True when loading model tokenizers, and runs without sandboxing. This causes transformers.AutoTokenizer.frompretrained to import and execute arbitrary Python files included in any model pulled fr...

Exploit for CVE-2026-47668

CVE-2026-47668 DbGate Unauthenticated Remote Code Execution...

Malicious code in aes-decode-runner-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a84e76208311859e852fea114c26e1eff1202eeff9a463707c5ae0deec68725c aes-decode-runner-pro ships an opaque 326-byte AES-GCM ciphertext DEFAULTFINALENCODEDTEXT in src/config/defaults.js along with a hardcoded passphrase...

CVE-2026-9350

A vulnerability was identified in NousResearch hermes-agent up to 2026.4.16. This affects the function checkallcommandguards of the file tools/approval.py of the component Batch Runner. Such manipulation leads to missing authorization. The attack can be launched remotely. The exploit is publicly...

CVE-2026-9350 NousResearch hermes-agent Batch Runner approval.py check_all_command_guards authorization

A vulnerability was identified in NousResearch hermes-agent up to 2026.4.16. This affects the function checkallcommandguards of the file tools/approval.py of the component Batch Runner. Such manipulation leads to missing authorization. The attack can be launched remotely. The exploit is publicly...