Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via the -env-vars process when multi-step templates are used against untrusted targets. An attacker can execute arbitrary code by injecting malicious DSL expressions. This is only exploitable if multi-step...

GHSA-XMRV-PMRH-HHX2 vulnerabilities

Vulnerabilities for packages: spire-server, crossplane-provider-aws-ec2, crossplane-provider-aws-cloudfront, ksops, boring-registry, crossplane-provider-aws-cloudformation, k8sgpt, crossplane-provider-aws-cloudwatchlogs, kots, opencost, temporal, gitaly, litestream, eksctl, grafana-mimir,...

GHSA-RRXV-PMQ9-X67R vulnerabilities

Vulnerabilities for packages: nuclei...

GHSA-RRXV-PMQ9-X67R vulnerabilities

Vulnerabilities for packages: nuclei...

CVE-2026-26995 vulnerabilities

Vulnerabilities for packages: nuclei...

GHSA-7M29-F4HW-G2VX vulnerabilities

Vulnerabilities for packages: nuclei...

CVE-2026-26994 vulnerabilities

Vulnerabilities for packages: nuclei...

CVE-2026-27017 vulnerabilities

Vulnerabilities for packages: nuclei...

CVE-2026-26994 vulnerabilities

Vulnerabilities for packages: nuclei...

CVE-2024-44905 vulnerabilities

Vulnerabilities for packages: nuclei...

GHSA-6XP3-P59P-Q4FJ vulnerabilities

Vulnerabilities for packages: nuclei...

GHSA-6XP3-P59P-Q4FJ vulnerabilities

Vulnerabilities for packages: nuclei...

CVE-2024-44905 vulnerabilities

Vulnerabilities for packages: nuclei...

CVE-2025-30153 vulnerabilities

Vulnerabilities for packages: nuclei, timoni, dataplaneapi, gptscript...

GHSA-PMC3-P9HX-JQ96 vulnerabilities

Vulnerabilities for packages: nuclei...

CVE-2024-5262 vulnerabilities

Vulnerabilities for packages: nuclei...