490165 matches found
CVE-2026-47192 kas's late signature validation may allow unnoticed repository manipulations
kas is a setup tool for bitbake based projects. Starting in version 4.8 and prior to version 5.3, kas checks out and processes repositories regarding configuration includes prior to validating signatures of those repositories. This may allow to replace on original repository with one under the...
CVE-2026-47192
kas is a setup tool for bitbake based projects. Starting in version 4.8 and prior to version 5.3, kas checks out and processes repositories regarding configuration includes prior to validating signatures of those repositories. This may allow to replace on original repository with one under the...
EUVD-2026-58719
kas is a setup tool for bitbake based projects. Prior to version 5.3, when relying solely on a git commit ID SHA-1 or SHA-256 to qualify if a checkout of a repository is equivalent to the state validated while adding its commit ID to a kas configuration, users may be tricked to check out a branch...
CVE-2026-47191 kas checks out SHA-like git branches as valid commits
kas is a setup tool for bitbake based projects. Prior to version 5.3, when relying solely on a git commit ID SHA-1 or SHA-256 to qualify if a checkout of a repository is equivalent to the state validated while adding its commit ID to a kas configuration, users may be tricked to check out a branch...
CVE-2026-49826 Concourse login flow has an open redirect issue
Concourse is a container-based automation system written in Go. Prior to version 8.2.3, an attacker is able to craft and send a user a URL that will redirect the user from the Concourse web server to any other site. This could be used in a phishing attack to steal user's credentials. This has bee...
CVE-2026-49986 Cortex has Untrusted Project Bootstrap Code Execution via `CLAUDE_PROJECT_DIR`
The Cortex MCP server neuro-cortex-memory, a cross-platform persistent memory MCP, prior to version 3.17.1 treats the CLAUDEPROJECTDIR environment variable — automatically set by Claude Code to the currently open project directory — as a trusted Cortex developer checkout. When the openvisualizati...
CVE-2026-47766
crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...
MINI-7948-7G9H-6H7G
Bulletin has no description...
MINI-2XHJ-M3WG-CG28
Bulletin has no description...
MINI-M6WG-VJJG-CFR4
Bulletin has no description...
MINI-WMH4-3XCQ-R7XW
Bulletin has no description...
CVE-2026-69101
creationtimestamp| type| source ---|---|--- 2026-08-14 16:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mt2jpyyieq26 2026-08-14 16:25:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2eojc6ppcaurd...
MINI-6V73-H6XG-MHP7
Bulletin has no description...
MINI-HVQ7-R5G7-H9J9
Bulletin has no description...
MINI-JJ4Q-F9G4-FVGC
Bulletin has no description...
MINI-HRJH-G5XJ-XPWV
Bulletin has no description...
MINI-FW5Q-P9QV-QGCW
Bulletin has no description...
MINI-5JG2-5PFH-J3GV
Bulletin has no description...