CVE-2026-56692

NanoClaw before 2.1.17 contains a symlink following vulnerability in forwardAttachedFiles that allows container-controlled agents to exfiltrate host-readable files. The host validates attachment filenames using only isSafeAttachmentName before copying with fs.copyFileSync, which follows symlinks...

org.jenkins-ci.plugins:azure-acs (>=0.1.0 <=0.2.4), org.jenkins-ci.plugins:azure-app-service (>=0.1 <=0.4.2) +8 more potentially affected by CVE-2023-25768 via org.jenkins-ci.plugins:azure-credentials (>=1.0 <=1.6.1)

org.jenkins-ci.plugins:azure-credentials MAVEN version =1.0, =0.1.0, =0.1, =0.3.0, =0.6.0, =3.0.0, =0.1.0, =1.0.0, =0.4.8, =0.1.0, =1.3, =1.5 Source cves: CVE-2023-25768 Source advisory: OSV:GHSA-PX2R-CMR2-PHW7...

org.jenkins-ci.plugins:azure-container-agents (>=0.3.0 <=0.4.1), org.jenkins-ci.plugins:s3 (>=0.6 <=0.11.2) +2 more potentially affected by CVE-2020-2183 via org.jenkins-ci.plugins:copyartifact (>=1.21 <=1.38)

org.jenkins-ci.plugins:copyartifact MAVEN version =1.21, =0.3.0, =0.6, =0.16, =0.3.4, =0.3.13 Source cves: CVE-2020-2183 Source advisory: OSV:GHSA-VV89-XGGX-QQH2...