#cwe-526

共收录 12 条相关情报。

← 返回所有主题
漏洞预警2026-10-30 发布HIGH

To pass a server's password to psql and to the utilities pgAdmin 4 runs as background processes, the server manager wrote it into pgAdmin's own process environment: as PGPASSWOR...

CVE-2026-116246

To pass a server's password to psql and to the utilities pgAdmin 4 runs as background processes, the server manager wrot

来源摘录 · NVD / GitHub Advisory

安全公告2026-10-20 发布INFO

Letta through 0.16.8 contains an information disclosure vulnerability that allows users running...

CVE-2026-77938

Letta through 0.16.8 contains an information disclosure vulnerability that allows users running tools to read server sec

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-20 发布INFO

Letta through 0.16.8 contains an information disclosure vulnerability that allows users running tools to read server secrets because LocalSandbox subprocesses inherit the full s...

CVE-2026-77938

Letta through 0.16.8 contains an information disclosure vulnerability that allows users running tools to read server sec

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

mini-swe-agent 1.10.0 through 2.4.6 contains an information exposure vulnerability in BubblewrapEnvironment because bwrap omits --clearenv, so sandboxed commands inherit the hos...

CVE-2026-108592

mini-swe-agent 1.10.0 through 2.4.6 contains an information exposure vulnerability in BubblewrapEnvironment because bwra

历史摘要 · 未重新核验 · NVD

安全公告2026-10-10 发布INFO

mini-swe-agent 1.10.0 through 2.4.6 Environment Exposure via BubblewrapEnvironment

CVE-2026-108592

mini-swe-agent 1.10.0 through 2.4.6 contains an information exposure vulnerability in BubblewrapEnvironment because bwra

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-09-04 发布INFO

CodeWhale: js_execution leaks parent environment to model context via missing env scrub

CVE-2026-75915

### Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-19 发布INFO

Renovate versions from 42.68.1 before 42.96.3 (and from 42.68.1 before 43.4.4), including corresponding Docker images (renovate/renovate, mend/renovate-ce, renovate-ee-server, r...

CVE-2026-76227

Renovate versions from 42.68.1 before 42.96.3 (and from 42.68.1 before 43.4.4), including corresponding Docker images (r

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-13 发布INFO

Cleartext Storage of Sensitive Information in an Environment Variable (CWE-526) in Elastic Cloud on Kubernetes (ECK) can lead to information disclosure via Retrieve Embedded Sen...

CVE-2026-72648

Cleartext Storage of Sensitive Information in an Environment Variable (CWE-526) in Elastic Cloud on Kubernetes (ECK) can

历史摘要 · 未重新核验 · NVD

安全公告2026-05-29 发布INFO

In JetBrains TeamCity before 2025.11.2 exposure of sensitive data via default agent parameters

CVE-2026-49377

In JetBrains TeamCity before 2025.11.2 exposure of sensitive data via default agent parameters

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-29 发布INFO

In JetBrains TeamCity before 2025.11.2 exposure of sensitive data via default agent parameters

CVE-2026-49377

In JetBrains TeamCity before 2025.11.2 exposure of sensitive data via default agent parameters

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-14 发布INFO

python-utcp is the python implementation of UTCP. Prior to 1.1.3, _prepare_environment() in cli_communication_protocol.py passes a full copy of os.environ to every CLI subproces...

CVE-2026-45370

python-utcp is the python implementation of UTCP. Prior to 1.1.3, _prepare_environment() in cli_communication_protocol.p

历史摘要 · 未重新核验 · NVD

安全公告2026-05-14 发布INFO

python-utcp: Full Process Environment Exposed to CLI Subprocess - Secrets Leakage via Command Injection

CVE-2026-45370

## Summary `_prepare_environment()` in `cli_communication_protocol.py` passes a full copy of `os.environ` to every CLI

历史摘要 · 未重新核验 · GitHub Advisory