1431 matches found
GHSA-94XW-8RG2-4FMC vulnerabilities
Vulnerabilities for packages: gitlab-runner-fips...
GHSA-G797-R4R7-WP94 vulnerabilities
Vulnerabilities for packages: gitlab-runner-fips...
GHSA-32CH-6X54-Q4H9 vulnerabilities
Vulnerabilities for packages: prometheus-mysqld-exporter, pulumi-kubernetes-operator, kubernetes-dashboard-fips, docker-credential-acr-env, nri-couchbase, cue-fips, kube-logging-logging-operator, kube-oidc-proxy, minio-fips, nerdctl, configmap-reload, protoc-gen-go-grpc, pulumi, cert-exporter-fip...
CVE-2022-39321
GitHub Actions Runner is the application that runs a job from a GitHub Actions workflow. The actions runner invokes the docker cli directly in order to run job containers, service containers, or container actions. A bug in the logic for how the environment is encoded into these docker commands wa...
CVE-2020-13347
A command injection vulnerability was discovered in Gitlab runner versions prior to 13.2.4, 13.3.2 and 13.4.1. When the runner is configured on a Windows system with a docker executor, which allows the attacker to run arbitrary commands on Windows host, via DOCKERAUTHCONFIG build variable...
Malicious code in chialisp-lsp-runner (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6dd3d79d6053db1cd153f11977e45ca5dabfc1ed73e22a68e807ce879e5be59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-1073 Malicious code in chialisp-lsp-runner (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6dd3d79d6053db1cd153f11977e45ca5dabfc1ed73e22a68e807ce879e5be59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
io.kestra:jdbc (>=0.10.0 <=0.20.10), io.kestra:jdbc-h2 (>=0.18.0 <=0.20.10) +5 more potentially affected by unknown CVE via io.kestra:core (>=0.10.0 <=0.20.10)
io.kestra:core MAVEN version =0.10.0, =0.10.0, =0.18.0, =0.10.0, =0.10.0, =0.16.5, =0.10.0, =0.18.0, =0.20.10 Source cves: unknown CVE Source advisory: SNYK:JAVA-IOKESTRA-8687935...
Malicious code in ig-sonar-runner (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 678d2f9e7e569b552fb1c7141755f6c84ec21e62122d3167be78aca0bd1ee2e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-578 Malicious code in ig-sonar-runner (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 678d2f9e7e569b552fb1c7141755f6c84ec21e62122d3167be78aca0bd1ee2e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-35 Malicious code in digitalexp-lowcode-runner-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff497f2370d8b4d0bbe77fb825c837cdd2a57a506ec952b2a4e3ba78f273d1b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in digitalexp-lowcode-runner-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff497f2370d8b4d0bbe77fb825c837cdd2a57a506ec952b2a4e3ba78f273d1b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-56582 btrfs: fix use-after-free in btrfs_encoded_read_endio()
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free in btrfsencodedreadendio Shinichiro reported the following use-after free that sometimes is happening in our CI system when running fstests' btrfs/284 on a TCMU runner device: BUG: KASAN:...
CVE-2024-56582 btrfs: fix use-after-free in btrfs_encoded_read_endio()
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free in btrfsencodedreadendio Shinichiro reported the following use-after free that sometimes is happening in our CI system when running fstests' btrfs/284 on a TCMU runner device: BUG: KASAN:...
[SECURITY] Fedora 41 Update: golang-github-task-3.40.1-1.fc41
A task runner / simpler Make alternative written in Go...
net.sc8s:elastic-testkit_2.13 (=0.96.0), nl.basjes.parse.useragent:yauaa-elasticsearch-8 (=7.29.0) +3 more potentially affected by CVE-2024-12539 via org.elasticsearch:elasticsearch (>=8.16.0 <=8.16.1)
org.elasticsearch:elasticsearch MAVEN version =8.16.0, =8.16.0, =8.16.0, =8.16.0, =8.16.1 Source cves: CVE-2024-12539 Source advisory: OSV:GHSA-5MPW-4546-2WCR...
SUSE-RU-2024:4213-1 Recommended update for helm
helm was updated to fix the following issues: Update to version 3.16.3: fix: fix label name Fix typo in pkg/lint/rules/chartfiletest.go Increasing the size of the runner used for releases. fixhooks: correct hooks delete order Bump github.com/containerd/containerd from 1.7.12 to 1.7.23 Update to...
CVE-2024-8237 vulnerabilities
Vulnerabilities for packages: gitlab-runner-fips...