CVE-2021-39152

creationtimestamp| type| source ---|---|--- 2021-08-23 22:23:37+00:00| seen| https://t.me/cibsecurity/27719 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-39152.yaml 2026-02-16 21:02:33+00:00| seen|...

CVE-2020-36327

A flaw was found in the way Bundler determined the source repository when installing dependencies of source-restricted gem packages. In configurations that use multiple gem repositories and explicitly define from which source repository certain gems are to be installed, a dependency of a...

Remote Code Execution

dependabot-common is vulnerable to remote code execution. An attacker is able to inject arbitrary Shell commands via a branch name URL during cloning of the source repository...

GHSA-23F7-99JX-M54R Remote code execution in dependabot-core branch names when cloning

Impact Remote code execution vulnerability in dependabot-common and dependabot-gomodules when a source branch name contains malicious injectable bash code. For example, if Dependabot is configured to use the following source branch name: "/$curl,127.0.0.1", Dependabot will make a HTTP request to...