CVE-2025-53542

Headlamp is an extensible Kubernetes web UI. A command injection vulnerability was discovered in the codeSign.js script used in the macOS packaging workflow of the Kubernetes Headlamp project. This issue arises due to the improper use of Node.js's execSync function with unsanitized input derived...

Command Injection

gitlog is vulnerable to command injection. The vulnerability exists through the value of branch where unsanitized inputs are sent to the execSync function...