gh-hijack-runner

gh-hijack-runner A python script to create a fake GitHub runner and hijack pipeline jobs to leak CI/CD secrets. Discover more details in the following blogpost: https://www.synacktiv.com/publications/hijacking-github-runners-to-compromise-the-organization Exploitation If you can obtain a...

CVE-2026-55251 NetBox Device Type Library: Arbitrary Code Execution on CI Runner Through Malicious requirements.txt, .pre-commit-hooks-config.yaml, and .gitmodules Files

NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. Prior to commit f41fc1e, the CI workflow .github/workflows/validation.yml runs on pullrequest and executes code supplied by the pull request before any maintainer review. Three...

cve-2026-31431

CVE-2026-31431 Copy Fail Test This repository contains a workflow file for GitHub Actions to test whether the action runner is affected by CVE-2026-31431. You can do the test by yourself, just create a repository by this template and trigger the test.yml workflow manually remember to change the o...

fastgpt-sandbox-audit

fastgpt-sandbox-audit FastGPT Python sandbox escape chain audit tool. The "Code Runner" node in FastGPT workflows passes user Python code to an isolated sandbox for execution. In v4.14.8, the sandbox protections are purely Python-level module blacklist + AST checks + open guard + import guard. Th...

CVE-2026-103754

A flaw was found in ansible-runner. The unstreamdir function, which receives and extracts a streamed zip archive on the worker side of the ansible-runner transmit/worker protocol, re-creates symbolic links from archive content without validating the link target and applies chmod and utime to an...

CVE-2026-103754

A flaw was found in ansible-runner. The unstreamdir function, which receives and extracts a streamed zip archive on the worker side of the ansible-runner transmit/worker protocol, re-creates symbolic links from archive content without validating the link target and applies chmod and utime to an...

CVE-2026-103754

A flaw in ansible-runner 's unstream_dir() function allows for path traversal and symlink escape during the extraction of a streamed zip archive. The vulnerability exists because the function fails to validate symbolic link targets and applies chmod() and utime() to unsanitized filesystem paths d...

EUVD-2026-90788

A flaw was found in ansible-runner. The unstreamdir function, which receives and extracts a streamed zip archive on the worker side of the ansible-runner transmit/worker protocol, re-creates symbolic links from archive content without validating the link target and applies chmod and utime to an...

CVE-2026-103754 Ansible-runner: ansible-runner: path traversal and symlink escape in unstream_dir() allows file write outside the target directory

A flaw was found in ansible-runner. The unstreamdir function, which receives and extracts a streamed zip archive on the worker side of the ansible-runner transmit/worker protocol, re-creates symbolic links from archive content without validating the link target and applies chmod and utime to an...

CVE-2026-103754 Ansible-runner: ansible-runner: path traversal and symlink escape in unstream_dir() allows file write outside the target directory

A flaw was found in ansible-runner. The unstreamdir function, which receives and extracts a streamed zip archive on the worker side of the ansible-runner transmit/worker protocol, re-creates symbolic links from archive content without validating the link target and applies chmod and utime to an...

CVE-2026-103754

A flaw was found in ansible-runner. The unstreamdir function, which receives and extracts a streamed zip archive on the worker side of the ansible-runner transmit/worker protocol, re-creates symbolic links from archive content without validating the link target and applies chmod and utime to an...

CLEANSTART-2025-WF62094 Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3

Security vulnerability affects the gitlab-runner package. Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3...

CVE-2026-101912 vulnerabilities

Vulnerabilities for packages: actions-runner, sqlpad, lerna, code-server, langfuse, tileserver-gl-fips, opensearch-dashboards, librechat, opensearch-dashboards-fips, unleash, langfuse-fips, unleash-proxy, npm, homepage, kibana...

CVE-2026-102278 vulnerabilities

Vulnerabilities for packages: arangodb, foxx-cli, lerna, langfuse, langfuse-fips, dotstatsuite-supercore, gitlab-rails-ce-fips, kibana, sqlpad, rancher-api-ui, unleash, opensearch-dashboards, unleash-fips, npm, verdaccio, ts-patch, actions-runner, lambda-nodejs, nextcloud-server, gitlab-rails-ce,...

CVE-2026-18540 vulnerabilities

Vulnerabilities for packages: actions-runner, code-server, npm, homepage, kibana...

GHSA-RFGV-XXQX-MFG5 vulnerabilities

Vulnerabilities for packages: actions-runner, code-server, npm, homepage, kibana...

CVE-2026-19534 vulnerabilities

Vulnerabilities for packages: actions-runner, code-server, npm, homepage, kibana...

GHSA-Q2HR-2G5M-VWHR vulnerabilities

Vulnerabilities for packages: arangodb, foxx-cli, lerna, langfuse, langfuse-fips, dotstatsuite-supercore, gitlab-rails-ce-fips, kibana, sqlpad, rancher-api-ui, unleash, opensearch-dashboards, unleash-fips, npm, verdaccio, ts-patch, actions-runner, lambda-nodejs, nextcloud-server, gitlab-rails-ce,...

GHSA-R53P-7PC4-XJ5R vulnerabilities

Vulnerabilities for packages: actions-runner, code-server, npm, homepage, kibana...

CVE-2026-102277 vulnerabilities

Vulnerabilities for packages: arangodb, foxx-cli, lerna, langfuse, langfuse-fips, dotstatsuite-supercore, gitlab-rails-ce-fips, kibana, sqlpad, rancher-api-ui, unleash, opensearch-dashboards, unleash-fips, npm, verdaccio, ts-patch, actions-runner, lambda-nodejs, nextcloud-server, gitlab-rails-ce,...