114 matches found
CVE-2019-10380
Jenkins Simple Travis Pipeline Runner Plugin 1.0 and earlier specifies unsafe values in its custom Script Security whitelist, allowing attackers able to execute Script Security protected scripts to execute arbitrary code...
CVE-2025-31786
Missing Authorization vulnerability in Travis Simple Icons simple-icons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Icons: from n/a through = 2.8.4...
CVE-2025-31786
Missing Authorization vulnerability in Travis Simple Icons simple-icons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Icons: from n/a through = 2.8.4...
PT-2025-14172 · Unknown · Travis Simple Icons
Name of the Vulnerable Software and Affected Versions: Travis Simple Icons versions through 2.8.4 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions through 2.8.4,...
CVE-2025-31786: Missing Authorization
Missing Authorization vulnerability in Travis Simple Icons simple-icons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Icons: from n/a through = 2.8.4...
Several ARM products have security vulnerabilities
The ARM Cortex-A77, among others, is a central processing unit from the British company ARM. A security vulnerability exists in various Arm products, which stems from the possibility that memory accesses may be incorrectly converted. The following products are affected: ARM Cortex-A77, ARM...
travis-encrypt (>=0.0.1, <=0.3.2) potentially affected by CVE-2024-26130 via cryptography (1.5.0)
cryptography PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - travis-encrypt =0.0.1, =0.3.2 Source cves: CVE-2024-26130 Source advisory: OSV:PYSEC-2024-225...
travis-encrypt (>=0.0.1, <=0.3.2) potentially affected by CVE-2023-50782 via cryptography (1.5.0)
cryptography PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - travis-encrypt =0.0.1, =0.3.2 Source cves: CVE-2023-50782 Source advisory: OSV:GHSA-3WW4-GG4F-JR7F...
travis-encrypt (>=0.0.1, <=0.3.2) potentially affected by CVE-2024-0727 via cryptography (1.5.0)
cryptography PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - travis-encrypt =0.0.1, =0.3.2 Source cves: CVE-2024-0727 Source advisory: OSV:GHSA-9V9H-CGJ8-H64P...
travismanion.org Cross Site Scripting vulnerability OBB-3827359
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.4, <=0.4.1), org.jenkins-ci.plugins.workflow:workflow-multibranch (>=1.11, <=1.14-beta-1) +3 more potentially affected by CVE-2023-40338 via org.jenkins-ci.plugins:cloudbees-folder (5.1)
org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.4, =1.11, =1.0...
com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.4, <=0.4.1), org.jenkins-ci.plugins.workflow:workflow-multibranch (>=1.11, <=1.14-beta-1) +3 more potentially affected by CVE-2023-40336 via org.jenkins-ci.plugins:cloudbees-folder (5.1)
org.jenkins-ci.plugins:cloudbees-folder MAVEN version 5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:cloudbees-folder and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.4, =1.11, =1.0...
Malicious Package
Overview sample-travis-ci is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...
MAL-2022-5921 Malicious code in sample-travis-ci (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 568970137987e9314235b38ecb7007db2b4db3023f6eaf1cacb92983e90f3613 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in sample-travis-ci (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 568970137987e9314235b38ecb7007db2b4db3023f6eaf1cacb92983e90f3613 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
cargo-travis (>=0.0.10, <=0.0.11), cargo-travis-fork (0.0.11) potentially affected by unknown CVE via badge (0.2.0)
badge CARGO version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on badge and may be impacted: - cargo-travis =0.0.10, =0.0.11 - cargo-travis-fork 0.0.11 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0057...
projects.travisluong.com Cross Site Scripting vulnerability OBB-2662642
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Unpatched Travis CI API Bug Exposes Thousands of Secret User Access Tokens
An unpatched security issue in the Travis CI API has left tens of thousands of developers' user tokens exposed to potential attacks, effectively allowing threat actors to breach cloud infrastructures, make unauthorized code changes, and initiate supply chain attacks. "More than 770 million logs o...
GHSA-X7P9-VX6V-WV84 Jenkins Simple Travis Pipeline Runner Plugin script sandbox bypass vulnerability
Jenkins Simple Travis Pipeline Runner Plugin defines a custom list of pre-approved signatures for scripts protected by the Script Security sandbox. This custom list of pre-approved signatures allows the use of methods that can be used to bypass Script Security sandbox protection. This results in...
Jenkins Simple Travis Pipeline Runner Plugin script sandbox bypass vulnerability
Jenkins Simple Travis Pipeline Runner Plugin defines a custom list of pre-approved signatures for scripts protected by the Script Security sandbox. This custom list of pre-approved signatures allows the use of methods that can be used to bypass Script Security sandbox protection. This results in...