Knime Business Hub permission and access control issue vulnerability

Versions of KNIME Business Hub prior to 1.19.0 contain a permission and access control vulnerability. This vulnerability arises because network access between execution contexts is unrestricted. Authenticated remote users can access open network ports on executors within different execution...

CVE-2022-31051

A vulnerability was found in semantic-release. Secrets that are normally masked are accidentally disclosed if they contain characters excluded from uri encoding by encodeURI. The vulnerability is further limited to execution contexts where push access to the related repository is unavailable...