1715 matches found
CVE-2026-58053 Gitea act_runner - Container Hardening Bypass via Workflow Container Options
Gitea actrunner with the Docker backend through act 0.262.0 passes a workflow's container.options string to the Docker job container's HostConfig and, when configured with privileged: false, forces only the Privileged flag off while merging options such as --pid=host, --cap-add, and --security-op...
CVE-2026-58053
Gitea act_runner (Docker backend) up to act 0.262.0 is vulnerable: the workflow.container.options are merged into the Docker job container HostConfig, and if privileged is set to false, only the Privileged flag is disabled while options such as --pid=host, --cap-add, and --security-opt remain. A ...
CVE-2026-58053
Gitea actrunner with the Docker backend through act 0.262.0 passes a workflow's container.options string to the Docker job container's HostConfig and, when configured with privileged: false, forces only the Privileged flag off while merging options such as --pid=host, --cap-add, and --security-op...
PT-2026-53085
Name of the Vulnerable Software and Affected Versions Gitea act runner versions prior to 0.262.0 Description When using the Docker backend, the software passes the container.options string from a workflow to the Docker job container's HostConfig. If privileged is set to false, the system only...
GO-2026-5481 File Browser has a Command Injection via Hook Runner in github.com/filebrowser/filebrowser
File Browser has a Command Injection via Hook Runner in github.com/filebrowser/filebrowser...
CVE-2026-49444
n8n is an open source workflow automation platform. Prior to 1.123.48, 2.21.8, and 2.22.4, an authenticated user with permission to create or modify workflows containing a Python Code Node could escape the sandbox and achieve arbitrary code execution on the task runner container. This vulnerabili...
CVE-2026-49444 n8n: Python sandbox escape
n8n is an open source workflow automation platform. Prior to 1.123.48, 2.21.8, and 2.22.4, an authenticated user with permission to create or modify workflows containing a Python Code Node could escape the sandbox and achieve arbitrary code execution on the task runner container. This vulnerabili...
CVE-2026-49444 n8n: Python sandbox escape
n8n is an open source workflow automation platform. Prior to 1.123.48, 2.21.8, and 2.22.4, an authenticated user with permission to create or modify workflows containing a Python Code Node could escape the sandbox and achieve arbitrary code execution on the task runner container. This vulnerabili...
CVE-2026-49444 n8n: Python sandbox escape
n8n is an open source workflow automation platform. Prior to 1.123.48, 2.21.8, and 2.22.4, an authenticated user with permission to create or modify workflows containing a Python Code Node could escape the sandbox and achieve arbitrary code execution on the task runner container. This vulnerabili...
CVE-2026-49444
CVE-2026-49444 affects n8n prior to versions 1.123.48, 2.21.8, and 2.22.4 where an authenticated user with permission to create/modify workflows containing a Python Code Node could escape the sandbox and achieve arbitrary code execution on the task runner container. The issue is fixed in 1.123.48...
Malicious npm Packages Pose as PostCSS Tools to Deliver Windows RAT
Cybersecurity researchers have discovered a set of malicious npm packages that are designed to deliver a Windows-based remote access trojan RAT. The list of identified packages, is below - aes-decode-runner-pro 145 downloads postcss-minify-selector 256 downloads postcss-minify-selector-parser 615...
CVE-2026-12151 vulnerabilities
Vulnerabilities for packages: actions-runner, code-server, kibana, haraka, pelias-api, renovate, gemini-cli, saf, prism, node-gyp, npm, vitess, py3-captum...
GHSA-VXPW-J846-P89Q vulnerabilities
Vulnerabilities for packages: actions-runner, code-server, kibana, haraka, pelias-api, renovate, gemini-cli, saf, prism, node-gyp, npm, vitess, py3-captum...
CVE-2026-11525 vulnerabilities
Vulnerabilities for packages: actions-runner, code-server, kibana, haraka, pelias-api, renovate, gemini-cli, saf, prism, node-gyp, npm, vitess, py3-captum...
CVE-2026-6733 vulnerabilities
Vulnerabilities for packages: actions-runner, code-server, kibana, haraka, pelias-api, renovate, gemini-cli, saf, prism, node-gyp, npm, vitess, py3-captum...
CVE-2026-9679 vulnerabilities
Vulnerabilities for packages: actions-runner, code-server, kibana, haraka, pelias-api, renovate, gemini-cli, saf, prism, node-gyp, npm, vitess, py3-captum...
GHSA-35P6-XMWP-9G52 vulnerabilities
Vulnerabilities for packages: actions-runner, code-server, kibana, haraka, pelias-api, renovate, gemini-cli, saf, prism, node-gyp, npm, vitess, py3-captum...
GHSA-G8M3-5G58-FQ7M vulnerabilities
Vulnerabilities for packages: actions-runner, code-server, kibana, haraka, pelias-api, renovate, gemini-cli, saf, prism, node-gyp, npm, vitess, py3-captum...
GHSA-P88M-4JFJ-68FV vulnerabilities
Vulnerabilities for packages: actions-runner, code-server, kibana, haraka, pelias-api, renovate, gemini-cli, saf, prism, node-gyp, npm, vitess, py3-captum...
GHSA-FJV8-J4P5-CR9M Daytona: Path traversal in sandbox volume id mounts arbitrary host paths into the sandbox — cross-tenant data access and host escape
Summary A sandbox volume reference volumeId, which may also be a volume name was forwarded to the runner and used to build the host bind-mount source path without confinement. A reference containing path-traversal sequences could in principle resolve the mount source outside the intended per-volu...