CVE-2026-128036

The gittuf tool versions 0.4.0 through 0.16.0 is vulnerable to a flaw where verification checks only validate the root of trust signatures for new policies, failing to verify signatures for other metadata such as rule files . An attacker with push privileges can bypass the gittuf policy apply wor...

CVE-2023-23946-POC

CVE-2023-23946 POC Exploit Explanation and POC of the CVE-2023-23946 The CVE-2023-23946 vulnerability is caused by a flaw in the way git handles symbolic links. When git creates a symbolic link, it doesnt actually handle it as a symbolic link and because of that we can exploit it to point to file...

CVE-2026-60004

CVE-2026-60004 Gitea diffpatch RCE ★ CVE-2026-60004 Gitea diffpatch Git Hook RCE PoC ★ https://github.com/user-attachments/assets/403a70f4-4ff4-4ab7-b11c-d73d70adaf0b Overview CVE-2026-60004 is a Remote Code Execution RCE vulnerability in Gitea. The diffpatch API applies a supplied patch with git...

LocalAI < 4.6.0 - Server-Side Request Forgery

LocalAI before 4.6.0 is affected by an unauthenticated server-side request forgery vulnerability in the POST /models/apply endpoint. The gallery url field is passed to the gallery config fetcher without validation, allowing an unauthenticated attacker to make the server issue HTTP requests to...

CVE-2026-114469

Out-of-bounds read can crash git-apply1 when binary patch inflates to very large size...

EUVD-2026-124398

Out-of-bounds read can crash git-apply1 when binary patch inflates to very large size...

CVE-2026-114469

A flaw in Git allows an attacker to cause a Denial of Service (DoS) by crashing the git-apply(1) application. The vulnerability is caused by an out-of-bounds memory read during the processing of binary patches, where size validation incorrectly inspects the compressed input instead of the expande...

CVE-2026-114469

Out-of-bounds read can crash git-apply1 when binary patch inflates to very large size...

CVE-2026-114469 Out-of-bounds Read in Git

Out-of-bounds read can crash git-apply1 when binary patch inflates to very large size...

compose-lint: `fix --apply` can delete a line the user did not select, including a security setting

Impact compose-lint fix --apply converts the line numbers its fixers work with into positions in the file. The YAML parser treats a lone carriage return, U+0085, U+2028 and U+2029 as line breaks, but the conversion counted only \n. One of those characters inside a quoted value, which most editors...

GHSA-65V8-Q222-64XX compose-lint: `fix --apply` can delete a line the user did not select, including a security setting

Impact compose-lint fix --apply converts the line numbers its fixers work with into positions in the file. The YAML parser treats a lone carriage return, U+0085, U+2028 and U+2029 as line breaks, but the conversion counted only \n. One of those characters inside a quoted value, which most editors...

CVE-2026-123717

Eclipse Foundation Eclipse Otterdog versions through 1.7.1 is vulnerable to OS command injection and arbitrary code execution in the pass and bitwarden credential providers. An attacker capable of modifying an organization configuration can execute commands with the privileges of the operator run...

CVE-2026-123717 [Eclipse CSI - otterdog] OS Command Injection and Arbitrary Code Execution

OS command injection in the pass and bitwarden credential providers in Eclipse Foundation Eclipse Otterdog through 1.7.1 allows a user able to modify an organization configuration to execute arbitrary commands with the privileges of the operator running otterdog, including access to their...

CVE-2026-123717 [Eclipse CSI - otterdog] OS Command Injection and Arbitrary Code Execution

OS command injection in the pass and bitwarden credential providers in Eclipse Foundation Eclipse Otterdog through 1.7.1 allows a user able to modify an organization configuration to execute arbitrary commands with the privileges of the operator running otterdog, including access to their...

PT-2026-141578

OS command injection in the pass and bitwarden credential providers in Eclipse Foundation Eclipse Otterdog through 1.7.1 allows a user able to modify an organization configuration to execute arbitrary commands with the privileges of the operator running otterdog, including access to their...

CVE-2026-123717: Eclipse CSI otterdog: OS command injection in the pass and bitwarden credential providers in Eclipse Foundation Eclipse Otterdog through…

OS command injection in the pass and bitwarden credential providers in Eclipse Foundation Eclipse Otterdog through 1.7.1 allows a user able to modify an organization configuration to execute arbitrary commands with the privileges of the operator running otterdog, including access to their...

CVE-2026-114469

Git rejects patches larger than roughly 1 GiB, but that check only considered the size of the patch as it appears in the input. Binary patches are compressed and encoded, so a binary patch that inflates to a very large size slipped past the check and crashed Git with an out-of-bounds read in...

CVE-2026-123370

compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment. From 0.9.0 until 0.18.0, compose-lint's YAML parser recognizes lone carriage returns and Unicode line separators U+0085, U+2028, and U+2029 as line breaks while fix position conversion...

CVE-2026-123370 compose-lint: `fix --apply` can delete a line the user did not select, including a security setting

compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment. From 0.9.0 until 0.18.0, compose-lint's YAML parser recognizes lone carriage returns and Unicode line separators U+0085, U+2028, and U+2029 as line breaks while fix position conversion...

CVE-2026-123370 compose-lint: `fix --apply` can delete a line the user did not select, including a security setting

compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment. From 0.9.0 until 0.18.0, compose-lint's YAML parser recognizes lone carriage returns and Unicode line separators U+0085, U+2028, and U+2029 as line breaks while fix position conversion...