Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.8Duplicate Advisory: Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypassesJun 24, 2026
- Highgithubtoplanguages: Command Injection via Issue Title in Discord Notification WorkflowJun 19, 2026
- UnknownClaude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret ExfiltrationJun 10, 2026
- Critical10.0Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypassesEPSS 0.2%Apr 24, 2026
- Critical9.4Aquasecurity Trivy Embedded Malicious Code VulnerabilityKEVEPSS 1.7%Mar 23, 2026
- Critical9.1tj-actions/branch-names has a Command Injection VulnerabilityEPSS 0.7%Jul 25, 2025
- Medium6.2Bullfrog's DNS over TCP bypasses domain filteringEPSS 0.5%May 15, 2025
- High7.3tj-actions/changed-files has Potential Actions command injection in output filenames (GHSL-2023-271)EPSS 3.4%Jan 2, 2024
- High8.8Arbitrary command injection in embano1/wipEPSS 3.7%Apr 24, 2023
- High8.8github-slug-action vulnerable to arbitrary code executionEPSS 1.6%Mar 13, 2023
- Low3.0Azure/setup-kubectl: Escalation of privilege vulnerability for v3 and lowerEPSS 0.4%Mar 7, 2023
- Critical9.8gajira-create GitHub action vulnerable to arbitrary code executionEPSS 2.9%Oct 7, 2022
12 records · page 1 of 1
PreviousNext