cicd-goat

Deliberately vulnerable CI/CD environment. Hack CI/CD pipelines, capture the flags. 🚩 Created by Cider Security Acquired by Palo Alto Networks. Table of Contents Description Download & Run Linux & Mac Windows Powershell Usage Instructions Take the challenge Troubleshooting Solutions Contributing...

GHSA-QX36-8MW2-4R3X vulnerabilities

Vulnerabilities for packages: localstack, datadog-agent, elastic-connectors-fips, elastic-connectors...

GHSA-8H2C-GHFF-MPG9 vulnerabilities

Vulnerabilities for packages: datadog-agent, elastic-connectors, elastic-connectors-fips, localstack, datadog-agent-fips...

GHSA-VP6J-J7W5-5XJJ vulnerabilities

Vulnerabilities for packages: localstack, datadog-agent, elastic-connectors-fips, elastic-connectors...

GHSA-V4X9-3549-CRWV vulnerabilities

Vulnerabilities for packages: localstack, datadog-agent, elastic-connectors-fips, elastic-connectors...

GHSA-8FVV-FGR5-F8CH vulnerabilities

Vulnerabilities for packages: datadog-agent, elastic-connectors, elastic-connectors-fips, localstack, datadog-agent-fips...

CVE-2026-88029 vulnerabilities

Vulnerabilities for packages: datadog-agent, elastic-connectors, elastic-connectors-fips, localstack, datadog-agent-fips...

CVE-2026-96747 vulnerabilities

Vulnerabilities for packages: localstack, datadog-agent, elastic-connectors-fips, elastic-connectors...

CVE-2026-96748 vulnerabilities

Vulnerabilities for packages: localstack, datadog-agent, elastic-connectors-fips, elastic-connectors...

CVE-2026-96749 vulnerabilities

Vulnerabilities for packages: localstack, datadog-agent, elastic-connectors-fips, elastic-connectors...

CVE-2022-27251

CVE-2022-27251 Remote Code Execution in LocalStack 0.12.6 Due to the lack of sanitization on user input on the Lambda API handler field whilst spawning Lambda functions and the way Docker containers are insecurely spawned, an injection can be provided through AWS CLI in the --handler option to be...

GO-2026-6093 vulnerabilities

Vulnerabilities for packages: localstack...

CVE-2026-18654 vulnerabilities

Vulnerabilities for packages: localstack...

GHSA-HQVF-45JJ-MCCQ vulnerabilities

Vulnerabilities for packages: localstack...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: aws-ebs-csi-driver-fips, flux-operator, grafana-rollout-operator, gotenberg, victoriametrics, victoriametrics-cluster, loki-fips, go, flux-notification-controller, localstack, flux-source-controller, omnictl-multiarch, steampipe, flux-helm-controller, podinfo,...

GHSA-464C-974J-9XM6 vulnerabilities

Vulnerabilities for packages: localstack...

GHSA-WFP6-F47H-HXC3 vulnerabilities

Vulnerabilities for packages: localstack...

CVE-2026-13769 vulnerabilities

Vulnerabilities for packages: localstack...

EUVD-2026-48434

A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown function of the file src/index.js of the component Configuration Handler. The manipulation of the argument custom.localstack.docker.composefile leads to os command injection. An atta...

CVE-2026-16763

A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown function of the file src/index.js of the component Configuration Handler. The manipulation of the argument custom.localstack.docker.composefile leads to os command injection. An atta...