CVE-2026-56004

A shellcode injection in the mercurial handler of the obs tarscm source service before version 0.12.4 could be used by attackers able to provide a service file to execute code as the source service or the local user checking out the malicious services...

The vulnerability of the obs-service-tar_scm service of the Open Build Service software platform allows a perpetrator to gain unauthorized access to protected information or execute arbitrary code.

The vulnerability of the obs-service-tarscm service in the Open Build Service software platform is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or execute arbitrary code...