Harden-Runner security vulnerabilities

Harden-Runner is a program open source by StepSecurity. It provides network exit filter and runtime security for both GitHub-hosted and self-hosted runners. Versions of Harden-Runner prior to 2.14.2 contained security vulnerabilities. These vulnerabilities allowed outbound network connections to...

CVE-2026-25479

creationtimestamp| type| source ---|---|--- 2026-02-08 13:38:24+00:00| published-proof-of-concept| https://github.com/litestar-org/litestar/security/advisories/GHSA-93ph-p7v4-hwh4...

GHSA-MHG7-666J-CQG4

creationtimestamp| type| source ---|---|--- 2026-02-08 04:40:05+00:00| seen| https://gist.github.com/alon710/7bbde07266f0ce6a4608d33da3c417d3...

GHSA-4Q92-RFM6-2CQX

creationtimestamp| type| source ---|---|--- 2026-02-08 03:40:06+00:00| seen| https://gist.github.com/alon710/1c6b06029608bb23418dcb4699619f4d...

GHSA-W67G-2H6V-VJGQ

creationtimestamp| type| source ---|---|--- 2026-02-08 02:40:05+00:00| seen| https://gist.github.com/alon710/77fa3cb54e25b561e55732fa7bee4e36...

CVE-2025-11368

creationtimestamp| type| source ---|---|--- 2026-02-07 20:59:54+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-11368.yaml 2026-04-03 21:02:37+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mimmlfuquk2p...

CVE-2025-32257

creationtimestamp| type| source ---|---|--- 2026-02-07 06:32:17+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-32257.yaml 2026-02-11 21:03:09+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3memetafx352k 2026-04-03...

PT-2026-6908

Name of the Vulnerable Software and Affected Versions Harden-Runner versions prior to 2.14.2 Description Harden-Runner is a CI/CD security agent designed to function like an EDR for GitHub Actions runners. A security issue has been identified in the Community Tier of Harden-Runner that allows...

GHSA-P6X6-9MX6-26WJ

creationtimestamp| type| source ---|---|--- 2026-02-06 18:10:05+00:00| seen| https://gist.github.com/alon710/4df0dc54735b275488bf3aa51c4b4e68...

CVE-2026-24416

creationtimestamp| type| source ---|---|--- 2026-02-06 16:47:53+00:00| published-proof-of-concept| https://github.com/devcode-it/openstamanager/security/advisories/GHSA-p864-fqgv-92q4...

CVE-2026-24418

creationtimestamp| type| source ---|---|--- 2026-02-06 16:47:32+00:00| published-proof-of-concept| https://github.com/devcode-it/openstamanager/security/advisories/GHSA-4xwv-49c8-fvhq 2026-06-29 18:55:45+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/116834915504542283...

CVE-2026-24419

creationtimestamp| type| source ---|---|--- 2026-02-06 16:47:10+00:00| published-proof-of-concept| https://github.com/devcode-it/openstamanager/security/advisories/GHSA-4j2x-jh4m-fqv6...

CVE-2024-12724

creationtimestamp| type| source ---|---|--- 2026-02-06 16:21:41+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-12724.yaml...

CVE-2026-1337

creationtimestamp| type| source ---|---|--- 2026-02-06 15:31:03+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-xr72-g735-4vwp 2026-07-07 05:03:07+00:00| seen| https://bsky.app/profile/hermes71.bsky.social/post/3mpztbbmlk32h 2026-08-03 05:00:03+00:00| seen|...

Ubuntu: Security Advisory (USN-8012-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2026-25760

creationtimestamp| type| source ---|---|--- 2026-02-05 21:01:55+00:00| published-proof-of-concept| https://github.com/BishopFox/sliver/security/advisories/GHSA-2286-hxv5-cmp2...

GHSA-6WQW-2P9W-4VW4 vulnerabilities

Vulnerabilities for packages: langfuse, librechat, langfuse-fips...

CVE-2026-25758

creationtimestamp| type| source ---|---|--- 2026-02-05 13:49:28+00:00| published-proof-of-concept| https://github.com/spree/spree/security/advisories/GHSA-87fh-rc96-6fr6 2026-03-06 20:09:04+00:00| seen|...

CVE-2026-25757

creationtimestamp| type| source ---|---|--- 2026-02-05 13:46:30+00:00| published-proof-of-concept| https://github.com/spree/spree/security/advisories/GHSA-p6pv-q7rc-g4h9 2026-03-06 20:09:04+00:00| seen|...

CVE-2024-12734

creationtimestamp| type| source ---|---|--- 2026-02-05 04:57:35+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-12734.yaml 2026-02-07 21:02:56+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3meccxheos72i...