7 matches found
CVE-2026-56692
NanoClaw before 2.1.17 contains a symlink following vulnerability in forwardAttachedFiles that allows container-controlled agents to exfiltrate host-readable files. The host validates attachment filenames using only isSafeAttachmentName before copying with fs.copyFileSync, which follows symlinks...
PT-2026-51530
Name of the Vulnerable Software and Affected Versions NanoClaw versions prior to 2.1.17 Description An issue exists in the forwardAttachedFiles function where the host validates attachment filenames using only isSafeAttachmentName before performing a copy operation with fs.copyFileSync. Because...
org.jenkins-ci.plugins:azure-acs (>=0.1.4, <=0.1.5), org.jenkins-ci.plugins:azure-app-service (0.1.3) +4 more potentially affected by CVE-2023-25767 via org.jenkins-ci.plugins:azure-credentials (1.3)
org.jenkins-ci.plugins:azure-credentials MAVEN version 1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-acs =0.1.4, =0.3.0, =0.4.8, =0.6.0 -...
org.jenkins-ci.plugins:azure-acs (>=0.1.4, <=0.1.5), org.jenkins-ci.plugins:azure-app-service (0.1.3) +4 more potentially affected by CVE-2023-25766 via org.jenkins-ci.plugins:azure-credentials (1.3)
org.jenkins-ci.plugins:azure-credentials MAVEN version 1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-acs =0.1.4, =0.3.0, =0.4.8, =0.6.0 -...
org.jenkins-ci.plugins:azure-container-agents (>=0.3.0, <=0.4.1), org.jenkins-ci.plugins:s3 (>=0.6, <=0.11.2) +2 more potentially affected by CVE-2020-2183 via org.jenkins-ci.plugins:copyartifact (>=1.21, <=1.38)
org.jenkins-ci.plugins:copyartifact MAVEN version =1.21, =0.3.0, =0.6, =0.16, =0.3.4, =0.3.13 Source cves: CVE-2020-2183 Source advisory: OSV:GHSA-VV89-XGGX-QQH2...
org.jenkins-ci.plugins:azure-container-agents (>=0.3.0, <=0.4.1), org.jenkins-ci.plugins:s3 (>=0.6, <=0.11.2) +2 more potentially affected by CVE-2020-2183 via org.jenkins-ci.plugins:copyartifact (>=1.21, <=1.38)
org.jenkins-ci.plugins:copyartifact MAVEN version =1.21, =0.3.0, =0.6, =0.16, =0.3.4, =0.3.13 Source cves: CVE-2020-2183 Source advisory: GHSA-VV89-XGGX-QQH2...
org.jenkins-ci.plugins:azure-container-agents (>=0.3.0, <=0.4.1), org.jenkins-ci.plugins:s3 (>=0.6, <=0.11.2) +2 more potentially affected by CVE-2020-2183 via org.jenkins-ci.plugins:copyartifact (>=1.21, <=1.38)
org.jenkins-ci.plugins:copyartifact MAVEN version =1.21, =0.3.0, =0.6, =0.16, =0.3.4, =0.3.13 Source cves: CVE-2020-2183 Source advisory: MEND:CVE-2020-2183...