Logging operator has Fluentd configuration injection that allows remote code execution
CVE-2026-54680
### Summary The Fluentd configuration renderer in Logging operator writes strings from CRDs such as `Flow` directly int
#cwe-77
共收录 691 条相关情报。
← 返回所有主题cal.com (calcom repository, later renamed cal.diy) is affected by a repository takeover...
CVE-2024-58354
cal.com (calcom repository, later renamed cal.diy) is affected by a repository takeover vulnerability in its GitHub Acti
A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected...
CVE-2026-16763
A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown funct
A vulnerability was detected in publint up to 0.1.4. This impacts the function child_process.exec...
CVE-2026-16631
A vulnerability was detected in publint up to 0.1.4. This impacts the function child_process.exec of the file src/node/p
A vulnerability was detected in oclif up to 4.23.16. Affected by this vulnerability is the...
CVE-2026-16628
A vulnerability was detected in oclif up to 4.23.16. Affected by this vulnerability is the function child_process.exec o
A security vulnerability has been detected in syncfusion ej2-javascript-ui-controls up to 33.2.3....
CVE-2026-16630
A security vulnerability has been detected in syncfusion ej2-javascript-ui-controls up to 33.2.3. This affects the funct
A vulnerability was identified in danger danger-js up to 13.0.7. Impacted is the function danger...
CVE-2026-16629
A vulnerability was identified in danger danger-js up to 13.0.7. Impacted is the function danger.git.diffForFile of the
A vulnerability was detected in publint up to 0.1.4. This impacts the function child_process.exec of the file src/node/pack.js of the component package-manager Command Handler. ...
CVE-2026-16631
CVE-2026-16631 是一个存在于 publint 工具（版本 <=0.1.4）中的操作系统命令注入漏洞。漏洞位于 src/node/pack.js 文件的 child_process.exec 函数中，该函数作为包管理器命令处理器
publint package-manager pack.js child_process.exec os command injection
CVE-2026-16631
A vulnerability was detected in publint up to 0.1.4. This impacts the function child_process.exec of the file src/node/p
A security vulnerability has been detected in syncfusion ej2-javascript-ui-controls up to 33.2.3. This affects the function child_process.exec of the file package.json. The mani...
CVE-2026-16630
该漏洞存在于 Syncfusion 的 ej2-javascript-ui-controls 组件中，影响版本至 33.2.3。漏洞源于在 package.json 文件中调用了 child_process.exec 函数，攻击者可利用该函
A vulnerability was identified in danger danger-js up to 13.0.7. Impacted is the function danger.git.diffForFile of the file source/platforms/git/localGetFileAtSHA.ts of the com...
CVE-2026-16629
该漏洞影响 danger-js 组件（一个用于 CI 的 JavaScript 安全审查工具）的 13.0.7 及之前版本。漏洞位于 source/platforms/git/localGetFileAtSHA.ts 文件中的 danger
A vulnerability was detected in oclif up to 4.23.16. Affected by this vulnerability is the function child_process.exec of the component JIT Plugin Entry Handler. Performing a ma...
CVE-2026-16628
A vulnerability was detected in oclif up to 4.23.16. Affected by this vulnerability is the function child_process.exec o
danger danger-js CLI localGetFileAtSHA.ts danger.git.diffForFile os command injection
CVE-2026-16629
A vulnerability was identified in danger danger-js up to 13.0.7. Impacted is the function danger.git.diffForFile of the
oclif JIT Plugin Entry child_process.exec os command injection
CVE-2026-16628
A vulnerability was detected in oclif up to 4.23.16. Affected by this vulnerability is the function child_process.exec o
A weakness has been identified in umijs umi up to 4.6.63. The affected element is the function...
CVE-2026-16492
A weakness has been identified in umijs umi up to 4.6.63. The affected element is the function git.getFileCreateInfo of
A weakness has been identified in umijs umi up to 4.6.63. The affected element is the function git.getFileCreateInfo of the file packages/utils/src/getFileGitIno.ts of the compo...
CVE-2026-16492
A weakness has been identified in umijs umi up to 4.6.63. The affected element is the function git.getFileCreateInfo of
umijs umi GIT File Helper getFileGitIno.ts git.getFileCreateInfo os command injection
CVE-2026-16492
A weakness has been identified in umijs umi up to 4.6.63. The affected element is the function git.getFileCreateInfo of
A vulnerability was determined in QUSETIONS MiniCode-Python 0.1.0. This vulnerability affects the...
CVE-2026-16488
A vulnerability was determined in QUSETIONS MiniCode-Python 0.1.0. This vulnerability affects the function subprocess.Po
A vulnerability was identified in jsforce up to 3.10.16. This issue affects the function...
CVE-2026-16489
A vulnerability was identified in jsforce up to 3.10.16. This issue affects the function _execCommand in the library lib
A vulnerability was identified in jsforce up to 3.10.16. This issue affects the function _execCommand in the library lib/registry/sfdx.js of the component SFDX Connection Regist...
CVE-2026-16489
A vulnerability was identified in jsforce up to 3.10.16. This issue affects the function _execCommand in the library lib