PT-2026-85817

Package argo-cd-fips version 3.0.22-r0 fixes 2 vulnerabilities: ghsa-r6j8-c6r2-37rr, ghsa-2x5j-vhc8-9cwm...

PT-2026-85837

Package argo-cd-fips version 2.13.9-r4 fixes 1 vulnerabilities: ghsa-m6hq-p25p-ffr2...

PT-2026-85810

Package argo-cd-fips version 3.1.14-r0 fixes 14 vulnerabilities: ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-78h2-9frx-2jm8, ghsa-hfvc-g4fc-pqhx...

PT-2026-85954

Package argo-cd-fips version 3.1.9-r4 fixes 4 vulnerabilities: ghsa-4x4m-3c2p-qppc, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-hj2p-8wj8-pfq4...

PT-2026-86009

Package argo-cd-fips version 3.0.16-r0 fixes 2 vulnerabilities: ghsa-93mq-9ffx-83m2, ghsa-2v5j-vhc3-9cwm...

PT-2026-86116

Package argo-cd-fips version 3.0.20-r2 fixes 11 vulnerabilities: ghsa-93mq-9ffx-83m2, ghsa-6v2p-p543-phr9, ghsa-pwhc-rpq9-4c8w, ghsa-j5w8-q4qc-rx2x, ghsa-c6gw-w398-hv78...

PT-2026-86096

Package argo-cd version 3.0.16-r0 fixes 2 vulnerabilities: ghsa-93mq-9ffx-83m2, ghsa-2v5j-vhc3-9cwm...

PT-2026-86119

Package argo-cd version 3.2.7-r0 fixes 1 vulnerabilities: ghsa-37cx-329c-33x3...

PT-2026-85896

Package argo-cd-fips version 2.13.9-r0 fixes 9 vulnerabilities: ghsa-6v2p-p543-phr9, ghsa-mh63-6h87-95cp, ghsa-2vgg-9h3w-qbr4, ghsa-3wgm-2mw2-vh5m, ghsa-mw99-9chc-xw7r...

CVE-2026-12436 Improperly Controlled Modification of Dynamically-Determined Object Attributes in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user to modify CI/CD configuration belonging to another user due to improper validation of...

CVE-2026-12436

GitLab CE/EE is affected by CVE-2026-12436 in versions 18.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1. The issue arises from improper validation of user-supplied attributes when processing pipeline schedule inputs, potentially allowing an authenticated user to modify another user’...

EUVD-2026-50482

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user to modify CI/CD configuration belonging to another user due to improper validation of...

CVE-2026-12436 Improperly Controlled Modification of Dynamically-Determined Object Attributes in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user to modify CI/CD configuration belonging to another user due to improper validation of...

CVE-2026-12436: Improperly Controlled Modification of Dynamically-Determined Object Attributes

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user to modify CI/CD configuration belonging to another user due to improper validation of...

Woodpecker - Detect

Woodpecker was detected — a lightweight, powerful CI/CD engine with great extensibility. !/usr/bin/env python3 -- coding: utf-8 -- """Woodpecker was detected — a lightweight, powerful CI/CD engine with great extensibility.""" from kittysploit import from lib.protocols.http.httpclient import...

Strider CD Panel - Detect

Strider CD panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Strider CD panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Strider CD Panel - Detect', 'description': 'Strider CD panel...

GitLab CI YAML - Exposure Detection

The gitlab-ci.yml file, used for configuring CI/CD pipelines in GitLab, has been found exposed. This file contains crucial details about the build, test, and deployment processes, and may include sensitive information such as API keys, tokens, environment variables, and other credentials...

Bamboo - Detection

Detect the presence of Bamboo, a CI/CD tool. !/usr/bin/env python3 -- coding: utf-8 -- """Detect the presence of Bamboo, a CI/CD tool.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Bamboo - Detection', 'description...

safe-chain v1.5.13

Aikido Safe Chain ✅ Block malware on developer laptops and CI/CD ✅ Supports npm and PyPI more package managers coming ✅ Blocks packages newer than 48 hours without breaking your build ✅ Tokenless, free, no build data shared Need protection beyond npm & PyPI? Aikido Device Protection builds on Saf...

Malicious code in @koadz/sso (npm)

Source: amazon-inspector d284d5d0421ad906d63959ed4e0f3354106166311f4066ff794669f52d1eacfb package.json declares a postinstall hook that runs dist/index.js. The compiled bundle contains an appended payload absent from the index.ts source that, when executed as the main module, spawns a detached,...