CLEANSTART-2026-RJ61585 Security fixes in git-sync 4.5.1-r1

Package git-sync version 4.5.1-r1 fixes 10 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2025-61726, CVE-2025-61728, CVE-2025-68119...

CVE-2026-53535

Activepieces is an open source AI workflow automation platform. Prior to 0.82.0, the git-sync feature clones a user-configured Git repository into a temporary directory on the server and then writes flow, table, and connection state into it before pushing back, and two separate weaknesses allowed...

CVE-2026-53535

Activepieces is an open source AI workflow automation platform. Prior to 0.82.0, the git-sync feature clones a user-configured Git repository into a temporary directory on the server and then writes flow, table, and connection state into it before pushing back, and two separate weaknesses allowed...

CVE-2026-53535

Activepieces prior to 0.82.0 is affected by an arbitrary file write in the git-sync workflow. The issue occurs because git-sync clones a configured repository into a temporary server directory with Git’s symbolic-link handling enabled, allowing symlinks to redirect writes. Additionally, on-disk i...

CVE-2026-53535 Activepieces: Arbitrary file write in git-sync via path traversal and symlinks

Activepieces is an open source AI workflow automation platform. Prior to 0.82.0, the git-sync feature clones a user-configured Git repository into a temporary directory on the server and then writes flow, table, and connection state into it before pushing back, and two separate weaknesses allowed...

CVE-2026-53535 Activepieces: Arbitrary file write in git-sync via path traversal and symlinks

Activepieces is an open source AI workflow automation platform. Prior to 0.82.0, the git-sync feature clones a user-configured Git repository into a temporary directory on the server and then writes flow, table, and connection state into it before pushing back, and two separate weaknesses allowed...

EUVD-2026-45028

Activepieces is an open source AI workflow automation platform. Prior to 0.82.0, the git-sync feature clones a user-configured Git repository into a temporary directory on the server and then writes flow, table, and connection state into it before pushing back, and two separate weaknesses allowed...

CVE-2026-53535 Activepieces: Arbitrary file write in git-sync via path traversal and symlinks

Activepieces is an open source AI workflow automation platform. Prior to 0.82.0, the git-sync feature clones a user-configured Git repository into a temporary directory on the server and then writes flow, table, and connection state into it before pushing back, and two separate weaknesses allowed...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: helm-set-status, argo-events, incert, certificate-transparency, grafana-operator, mc, kubernetes, apko, datadog-agent, mattermost, smarter-device-manager, temporal-ui-server, bento, multus-cni, spicedb-operator, malcontent, grafana-agent-operator, cosign, mailpit,...

CLEANSTART-2026-ZW73167 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 4.5.1-r1

Multiple security vulnerabilities affect the git-sync package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: harbor, bank-vaults, rclone-fips, gitea-fips, minio-operator-fips, kubernetes-dashboard-auth-fips, loki-fips, keda, kaniko-fips, cilium-fips, policy-controller, wal-g, fulcio-fips, opentelemetry-collector-contrib, gomplate-fips, step-ca, minio, neuvector, tkn-fips,...