1940 matches found
ciguard: discover_pipeline_files follows symlinks out of scan root
Summary The discoverpipelinefiles function in src/ciguard/discovery.py introduced in v0.8.0 and used by the MCP scanrepo tool shipped in v0.8.1 walks a directory tree following symlinks, with cycle protection via tracking visited resolved paths. An attacker who can plant a symlink in a directory...
ciguard: SCA HTTP client reads response body without size cap
Summary Both SCA HTTP clients src/ciguard/analyzer/sca/osv.py and src/ciguard/analyzer/sca/endoflife.py call payload = json.loadsresp.read.decode'utf-8' without a maximum-bytes cap. A hostile or compromised endoflife.date / OSV.dev or a successful TLS MITM could return a multi-GB response,...
GHSA-XW8C-RRVX-F7XQ ciguard: SCA HTTP client reads response body without size cap
Summary Both SCA HTTP clients src/ciguard/analyzer/sca/osv.py and src/ciguard/analyzer/sca/endoflife.py call payload = json.loadsresp.read.decode'utf-8' without a maximum-bytes cap. A hostile or compromised endoflife.date / OSV.dev or a successful TLS MITM could return a multi-GB response,...
CLSA-2026-1778003336 Fix CVE(s): CVE-2026-0966
SECURITY UPDATE: heap buffer underflow in sshgethexa when called with a NULL pointer or zero-length input - debian/patches/CVE-2026-0966.patch: add NULL/zero-length input validation in sshgethexa; add unit-test coverage - CVE-2026-0966...
CLSA-2026-1777944610 grafana: Fix of CVE-2026-27877
CVE-2026-27877: fix exposure of direct data-source passwords via public dashboards by limiting frontend settings to data sources actually used by the dashboard - Note: upstream test additions in pkg/api/frontendsettingstest.go are not backported. The %check stage only runs the Jest frontend suite...
apko dirFS has a symlink-following path traversal that allows multiple entry points to escape the build root
Impact A crafted .apk could install a TypeSymlink tar entry whose target pointed outside the build root, and a subsequent directory-creation or file-write entry in the same or later archive could traverse that symlink to reach host paths the build user could write to. The root cause was the...
OpenClaw's Gateway Control UI bootstrap config required Gateway auth
Summary Gateway Control UI bootstrap config required Gateway auth. Affected Packages / Versions - Package: openclaw npm - Affected versions: = 2026.4.21 - Fixed version: 2026.4.22 Impact When Gateway authentication was enabled, the Control UI bootstrap config endpoint could still be read without ...
PT-2026-36400
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A mismatch between the hardcoded AMDGPU VA RESERVED TRAP SIZE 8KB and the KFD CWSR TBA TMA SIZE defined as 2 PAGE SIZE can lead to a kernel crash. On systems utilizing 64K page sizes, KF...
Exploit for Embedded Malicious Code in Tukaani Xz
Security Review: CVE-2024-3094 XZ Utils Backdoor Автор:...
CVE-2026-7416
A vulnerability was found in PolarVista xcode-mcp-server 1.0.0. This issue affects the function buildproject/runtests of the file src/index.ts of the component MCP Interface. The manipulation of the argument Request results in os command injection. The attack may be launched remotely. The exploit...
CVE-2026-7416
Summary: CVE-2026-7416 affects PolarVista xcode-mcp-server 1.0.0, specifically the MCP Interface’s build_project/run_tests in src/index.ts. The vulnerability arises from manipulating the Request argument, enabling an OS command injection. The advisory notes remote feasibility and public disclosur...
EUVD-2026-26293
A vulnerability was found in PolarVista xcode-mcp-server 1.0.0. This issue affects the function buildproject/runtests of the file src/index.ts of the component MCP Interface. The manipulation of the argument Request results in os command injection. The attack may be launched remotely. The exploit...
CLSA-2026-1777479919 bind: Fix of CVE-2025-40778
CVE-2025-40778: reject forged records in answer sections to prevent cache poisoning via crafted responses - build tests improved...
CLSA-2026-1777287060 bind: Fix of CVE-2025-40778
CVE-2025-40778: reject forged records in answer sections to prevent cache poisoning via crafted responses - build tests improved...
Xcode MCP Server 命令注入漏洞
Xcode MCP Server is an Xcode-integrated context-based protocol server developed by R. Huijts. Version 1.0.0 of Xcode MCP Server contains a command injection vulnerability. This vulnerability arises from the Request operation in the buildproject/runtests function within the src/index.ts file, whic...
The vulnerability of the kunit_filter_tests() function in Linux operating systems allows a attacker to compromise the accessibility of protected information.
The vulnerability of the kunitfiltertests function in Linux operating systems is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...
[SECURITY] Fedora 44 Update: python3.12-3.12.13-3.fc44
Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable:...
[SECURITY] Fedora 43 Update: python3.11-3.11.15-4.fc43
Python 3.11 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.11 package provides the "python3.11" executable:...
[SECURITY] Fedora 44 Update: python3.15-3.15.0~a8-1.fc44
Python 3.15 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.15 package provides the "python3.15" executable:...