Google Cloud Build 安全漏洞

Google Cloud Build is a fully managed CI/CD platform provided by Google, Inc. Versions of Google Cloud Build prior to version 2026-1-26 contained security vulnerabilities. These vulnerabilities were due to improper authorization in the GitHub Trigger Comment Control mechanism, which could allow...

vantuz (>=3.3.2 <=3.3.7) potentially affected by unknown CVE via openclaw (=0.0.1)

openclaw NPM version =0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - vantuz =3.3.2, =3.3.7 Source cves: unknown CVE Source advisory: OSV:GHSA-X82F-27X3-Q89C...

GHSA-MW96-CPMX-2VGC vulnerabilities

Vulnerabilities for packages: langfuse, vite, vitess...

Microsoft GitHub Copilot for JetBrains Command Injection Vulnerability

Microsoft GitHub Copilot for JetBrains is an AI programming assistant plugin from Microsoft USA that can be installed in various IDEs produced by JetBrains. A command injection vulnerability exists in Microsoft GitHub Copilot for JetBrains. The vulnerability stems from the application failing to...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion in the FunctionPushPop. An attacker can cause excessive resource consumption and application instability by triggering deep or infinite recursion through crafted input to the affected process. Remediation There is...

GHSA-V52C-386H-88MC

creationtimestamp| type| source ---|---|--- 2026-03-01 08:10:22+00:00| seen| https://gist.github.com/alon710/8ab283edb74cdc48bd86d05f78d0166b...

GHSA-XF7R-HGR6-V32P

creationtimestamp| type| source ---|---|--- 2026-03-01 07:40:22+00:00| seen| https://gist.github.com/alon710/4e7c76effa1548ba67f0464733eb7344...

GHSA-XFX2-PRG5-JQ3G

creationtimestamp| type| source ---|---|--- 2026-03-01 07:10:22+00:00| seen| https://gist.github.com/alon710/748a43a550acf66c2103297189dfb986 2026-03-01 07:30:03+00:00| seen| https://bsky.app/profile/flarestart.bsky.social/post/3mfy7s5omvb24...

CVE-2026-28415

creationtimestamp| type| source ---|---|--- 2026-03-01 04:10:22+00:00| seen| https://gist.github.com/alon710/794157ac4402be5b97d405f38441e2cb 2026-03-01 04:25:33+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mfxvi7zur4c2 2026-03-01...

GHSA-H3H8-3V2V-RG7M

creationtimestamp| type| source ---|---|--- 2026-03-01 01:10:21+00:00| seen| https://gist.github.com/alon710/b9cbc8bb91819a5e8479c60ca815f5c4...

GHSA-RFJG-6M84-CRJ2

creationtimestamp| type| source ---|---|--- 2026-02-28 09:10:10+00:00| seen| https://gist.github.com/alon710/e6e1d06f45ead4fd6adc1a03157a349c...

GHSA-FPG4-JHQR-589C

creationtimestamp| type| source ---|---|--- 2026-02-28 08:10:11+00:00| seen| https://gist.github.com/alon710/c9a9aad02e1c4d2d715228e3279389cd...

GHSA-945P-3JHM-6RCP

creationtimestamp| type| source ---|---|--- 2026-02-28 03:40:10+00:00| seen| https://gist.github.com/alon710/43a4ce973e7deb9cb22c759bda6c4252...

GHSA-5C6J-R48X-RMVQ

creationtimestamp| type| source ---|---|--- 2026-02-28 03:10:11+00:00| seen| https://gist.github.com/alon710/d1eb861b7784463c434753842ee96c85 2026-04-03 15:44:39+00:00| seen| https://gist.github.com/kbellioum/2aaedb76430c4e5fc2f81d1185d752b6 2026-04-21 11:56:50+00:00| seen|...

Exploit for CVE-2024-9999

ExploitRank - Exploit Intelligence Engine EIE v1.0.0 !Pyt...

GHSA-7777-FHQ9-592V

creationtimestamp| type| source ---|---|--- 2026-02-28 00:40:10+00:00| seen| https://gist.github.com/alon710/cc79fb84eb7e27eda5e00b377415b26c...

GHSA-QVMX-RQMX-PVFG vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2002-1614

creationtimestamp| type| source ---|---|--- 2026-02-27 07:25:02+00:00| seen| https://gist.github.com/ghh-jb/61f35d015c4e180bbddcf324be113e26...

GHSA-42CR-W2GR-M54Q

creationtimestamp| type| source ---|---|--- 2026-02-27 06:10:18+00:00| seen| https://gist.github.com/alon710/87a9eaadd5362fd30512683dd9901643...

CVE-2026-27938

WPGraphQL provides a GraphQL API for WordPress sites. Prior to version 2.9.1, the wp-graphql/wp-graphql repository contains a GitHub Actions workflow release.yml vulnerable to OS command injection through direct use of $ github.event.pullrequest.body inside a run: shell block. When a pull request...