2257 matches found
GHSA-R53P-7PC4-XJ5R vulnerabilities
Vulnerabilities for packages: actions-runner, homepage, prism, renovate, npm, commercial-gitlab-rails-ee-fips, code-server, kibana, lerna, commercial-gitlab-rails-ee...
GHSA-RFGV-XXQX-MFG5 vulnerabilities
Vulnerabilities for packages: actions-runner, homepage, prism, renovate, npm, commercial-gitlab-rails-ee-fips, code-server, kibana, lerna, commercial-gitlab-rails-ee...
CVE-2026-102277 vulnerabilities
Vulnerabilities for packages: renovate, redisinsight, unleash, rancher-api-ui, dotstatsuite-supercore, verdaccio, actions-runner, sqlpad, tensorflow-gpu-jupyter, langfuse-fips, graalvm, opentelemetry-auto-instrumentations-node, nextcloud-server, foxx-cli, kibana, gitlab-rails-ce-fips, lerna,...
CVE-2026-103754: Improper Limitation of a Pathname to a Restricted Directory
A flaw was found in ansible-runner. The unstreamdir function, which receives and extracts a streamed zip archive on the worker side of the ansible-runner transmit/worker protocol, re-creates symbolic links from archive content without validating the link target and applies chmod and utime to an...
PT-2026-103842
A flaw was found in ansible-runner. The unstream dir function, which receives and extracts a streamed zip archive on the worker side of the ansible-runner transmit/worker protocol, re-creates symbolic links from archive content without validating the link target and applies chmod and utime to an...
waldiez-runner (0.5.9) potentially affected by CVE-2026-102930 via virtualenv (20.33.0)
virtualenv PYPI version 20.33.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - waldiez-runner 0.5.9 Source cves: CVE-2026-102930 Source advisory: OSV:GHSA-94P9-XGH2-XP45...
gllm-core-binary (>=0.0.0.dev0, <=0.4.4b3), gllm-inference-binary (0.5.51b3) +5 more potentially affected by CVE-2026-102930 via virtualenv (20.30.0)
virtualenv PYPI version 20.30.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - gllm-core-binary =0.0.0.dev0, =0.3.149, =0.1.0, =1.0.51, =0.4.4, =0.4.8 Source cves: CVE-2026-102930 Source advisory: OSV:GHSA-94P9-XGH2-X...
clearml-agent (>=0.17.0, <=0.17.2), manven (>=0.1.0, <=0.2.0) +4 more potentially affected by CVE-2026-102930 via virtualenv (16.7.12)
virtualenv PYPI version 16.7.12 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - clearml-agent =0.17.0, =0.1.0, =0.4.0, =0.0.1, =0.3.0.dev0, =0.13.2rc2, =0.16.3 Source cves: CVE-2026-102930 Source advisory:...
clearml-agent (>=0.17.0, <=0.17.2), manven (>=0.1.0, <=0.2.0) +4 more potentially affected by CVE-2026-102938 via virtualenv (16.7.12)
virtualenv PYPI version 16.7.12 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - clearml-agent =0.17.0, =0.1.0, =0.4.0, =0.0.1, =0.3.0.dev0, =0.13.2rc2, =0.16.3 Source cves: CVE-2026-102938 Source advisory:...
waldiez-runner (0.5.9) potentially affected by CVE-2026-102938 via virtualenv (20.33.0)
virtualenv PYPI version 20.33.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - waldiez-runner 0.5.9 Source cves: CVE-2026-102938 Source advisory: OSV:GHSA-9H9J-4VRJ-GF7G...
CVE-2026-51872
Devika v1.0 is vulnerable to Code Injection via the Runner.runcode function in src/agents/runner/runner.py...
GHSA-WR3R-JHMC-F6JW vulnerabilities
Vulnerabilities for packages: gitlab-runner, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-runner-fips, gitlab-workhorse-ce-fips...
CVE-2026-92530 vulnerabilities
Vulnerabilities for packages: gitlab-runner, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-runner-fips, gitlab-workhorse-ce-fips...
CVE-2026-89078 vulnerabilities
Vulnerabilities for packages: gitlab-runner-fips, gitlab-runner...
CVE-2026-93577 vulnerabilities
Vulnerabilities for packages: gitlab-runner-fips, gitlab-runner...
GHSA-9CHR-4X58-948M vulnerabilities
Vulnerabilities for packages: gitlab-runner-fips, gitlab-runner...
GHSA-WQWG-376R-C226 vulnerabilities
Vulnerabilities for packages: gitlab-runner-fips, gitlab-runner...
GHSA-C3RM-3HQR-4QWM vulnerabilities
Vulnerabilities for packages: gitlab-runner, gitlab-workhorse-ce, gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-runner-fips, gitlab-workhorse-ce-fips...