CVE-2026-45058

The CVE-2026-45058 issue affects electerm (versions 3.8.8 and earlier). The root cause is persistent local-pty code execution via imported bookmarks or compromised sync targets, allowing an attacker to inject exec* fields or global config. This can cause remote code to run when a bookmark is open...

GHSA-JGG9-RW32-44PJ Electerm: Importing unsafe bookmark data could lead to unsafe operation when clicking local type bookmark

Impact Persistent local-pty code execution via imported bookmarks or compromised sync targets. Affects users who import bookmark JSON files or who have electerm sync configured gist/WebDAV. The attacker can inject exec fields or global config to cause remote code to run when a bookmark is opened ...

CVE-2026-28503

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. In versions prior to 2.6.0, the SyncViewSet.querysyncedfolder action in cookbook/views/api.py line 903 fetches a Sync object using getobjector404Sync, pk=pk without including space=request.space i...

CVE-2026-28503

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. In versions prior to 2.6.0, the SyncViewSet.querysyncedfolder action in cookbook/views/api.py line 903 fetches a Sync object using getobjector404Sync, pk=pk without including space=request.space i...

WordPress WPBlogSyn plugin <= 1.0 - Cross-Site Request Forgery to Arbitrary Remote Sync Configuration Update vulnerability

Cross-Site Request Forgery to Arbitrary Remote Sync Configuration Update vulnerability discovered by dayea song - Ahnlab in WordPress Plugin WPBlogSyn versions = 1.0...

CVE-2024-43397

Apollo is a configuration management system. A vulnerability exists in the synchronization configuration feature that allows users to craft specific requests to bypass permission checks. This exploit enables them to modify a namespace without the necessary permissions. The issue was addressed wit...

org.jenkins-ci.plugins:scm-sync-configuration (>=0.0.6, <=0.0.9), org.jenkins-ci.plugins:scm2job (>=2.1, <=2.5) potentially affected by CVE-2021-21698 via org.jenkins-ci.plugins:subversion (1.39)

org.jenkins-ci.plugins:subversion MAVEN version 1.39 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:subversion and may be impacted: - org.jenkins-ci.plugins:scm-sync-configuration =0.0.6, =2.1, =2.5 Source cves: CVE-2021-21698...

org.jenkins-ci.plugins:scm-sync-configuration (>=0.0.6, <=0.0.9), org.jenkins-ci.plugins:scm2job (>=2.1, <=2.5) potentially affected by CVE-2020-2304 via org.jenkins-ci.plugins:subversion (1.39)

org.jenkins-ci.plugins:subversion MAVEN version 1.39 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:subversion and may be impacted: - org.jenkins-ci.plugins:scm-sync-configuration =0.0.6, =2.1, =2.5 Source cves: CVE-2020-2304...

org.jenkins-ci.plugins:scm-sync-configuration (>=0.0.6, <=0.0.9), org.jenkins-ci.plugins:scm2job (>=2.1, <=2.5) potentially affected by CVE-2018-1000111 via org.jenkins-ci.plugins:subversion (1.39)

org.jenkins-ci.plugins:subversion MAVEN version 1.39 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:subversion and may be impacted: - org.jenkins-ci.plugins:scm-sync-configuration =0.0.6, =2.1, =2.5 Source cves: CVE-2018-1000111...

org.jenkins-ci.plugins:scm-sync-configuration (>=0.0.6, <=0.0.9), org.jenkins-ci.plugins:scm2job (>=2.1, <=2.5) potentially affected by CVE-2022-29046 via org.jenkins-ci.plugins:subversion (1.39)

org.jenkins-ci.plugins:subversion MAVEN version 1.39 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:subversion and may be impacted: - org.jenkins-ci.plugins:scm-sync-configuration =0.0.6, =2.1, =2.5 Source cves: CVE-2022-29046...

org.jenkins-ci.plugins:scm-sync-configuration (>=0.0.6, <=0.0.9), org.jenkins-ci.plugins:scm2job (>=2.1, <=2.5) potentially affected by CVE-2022-29048 via org.jenkins-ci.plugins:subversion (1.39)

org.jenkins-ci.plugins:subversion MAVEN version 1.39 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:subversion and may be impacted: - org.jenkins-ci.plugins:scm-sync-configuration =0.0.6, =2.1, =2.5 Source cves: CVE-2022-29048...