Lucene search
+L

7 matches found

NVD
NVD
•added 2026/07/17 4:17 p.m.•24 views

CVE-2026-15343

A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an attacker who had code execution inside the Dependabot updater container to write files to arbitrary repository paths, including GitHub Actions workflow files under .github/workflows/ as the path validation d...

8.6CVSS0.00752EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/07/17 3:18 p.m.•33 views

EUVD-2026-45189

A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an attacker who had code execution inside the Dependabot updater container to write files to arbitrary repository paths, including GitHub Actions workflow files under .github/workflows/ as the path validation d...

8.6CVSS6.3AI score0.00752EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/07/17 3:18 p.m.•28 views

CVE-2026-15343

A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an attacker who had code execution inside the Dependabot updater container to write files to arbitrary repository paths, including GitHub Actions workflow files under .github/workflows/ as the path validation d...

8.6CVSS6.3AI score0.00752EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
•added 2026/07/17 3:18 p.m.•64 views

CVE-2026-15343 Path traversal vulnerability in GitHub Enterprise Server allowed writing files to arbitrary repository paths, including GitHub Actions workflow files, via unchecked Dependabot dependency-file paths

A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an attacker who had code execution inside the Dependabot updater container to write files to arbitrary repository paths, including GitHub Actions workflow files under .github/workflows/ as the path validation d...

8.6CVSS0.00752EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/17 12:00 a.m.•3 views

CVE-2026-15343: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an attacker who had code execution inside the Dependabot updater container to write files to arbitrary repository paths, including GitHub Actions workflow files under .github/workflows/ as the path validation d...

8.6CVSS6.3AI score0.00752EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 12:35 p.m.•13 views

Malicious code in dependabot-updater-action (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
•added 2024/06/25 12:35 p.m.•17 views

MAL-2024-2077 Malicious code in dependabot-updater-action (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
Rows per page
Query Builder