OpenAI Codex Vulnerability Allowed Attackers to Steal GitHub Tokens

OpenAI Codex vulnerability allowed attackers to steal GitHub tokens via malicious branch names using hidden Unicode command injection flaw...

Composer has multiple command injections via malicious git/hg branch names

Impact The composer install command running inside a git/hg repository which has specially crafted branch names can lead to command injection. So this requires cloning untrusted repositories. Patches 2.2.24 for 2.2 LTS or 2.7.7 for mainline Workarounds Avoid cloning potentially compromised...

GoCD 命令注入漏洞

GoCD is a continuous delivery server. A security vulnerability exists in GoCD versions prior to 22.1.0. An attacker could exploit this vulnerability to gain remote code execution capability on a GoCD server by configuring malicious branch names that abuse Mercurial hooks/...