Lucene search
+L

3 matches found

Vulnrichment
Vulnrichment
added 2026/03/31 1:43 a.m.4 views

CVE-2026-34041 act: Unrestricted set-env and add-path command processing enables environment injection

act is a project which allows for local running of github actions. Prior to version 0.2.86, act unconditionally processes the deprecated ::set-env:: and ::add-path:: workflow commands, which was disabled due to environment injection risks. When a workflow step echoes untrusted data to stdout, an...

7.7CVSS5.9AI score0.00619EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/03/27 12:0 a.m.8 views

PT-2026-28594

Name of the Vulnerable Software and Affected Versions act versions prior to 0.2.86 Description act unconditionally processes the deprecated ::set-env:: and ::add-path:: workflow commands, which GitHub Actions disabled due to environment injection risks. When a workflow step echoes untrusted data ...

9.8CVSS6AI score0.00619EPSS
SaveExploits1
OSV
OSV
added 2023/06/12 6:54 a.m.7 views

SUSE-SU-2023:2485-1 Security update for gdb

This update for gdb fixes the following issues: gdb was updated to 12.1. jscSLE-21561 DBX mode is deprecated, and will be removed in GDB 13. GDB 12 is the last release of GDB that will support building against Python 2. From GDB 13, it will only be possible to build GDB itself with Python 3...

7.8CVSS7.8AI score0.02214EPSS
SaveExploits1References8
Rows per page
Query Builder