Securing CI/CD in an agentic world: Claude Code Github action case
Microsoft Threat Intelligence identified a prompt injection pathway in Claude Code GitHub Action that allowed access to workflow secrets under
Read More
Security
03
CVE-2026-48102 | mcmilk 7-Zip up to 26.00 File Identifier Descriptor Parser UdfIn.cpp Open out-of-bounds (GHSL-2026-115)
A vulnerability was found in mcmilk 7-Zip up to 26.00. It has been rated as problematic. The affected element is
Read More
CVE-2026-11362 | BINARY DataDog::DogStatsd up to 0.07 on Perl format_event crlf injection
A vulnerability categorized as critical has been discovered in BINARY DataDog::DogStatsd up to 0.07 on Perl. The impacted element is
Read More
CVE-2026-48101 | mcmilk 7-Zip up to 26.00 OpenCapsule uninitialized resource (GHSL-2026-115)
A vulnerability identified as problematic has been detected in mcmilk 7-Zip up to 26.00. This affects the function OpenCapsule. Performing
Read More
CVE-2026-9270 | BINARY DataDog::DogStatsd up to 0.07 on Perl send_stats stat crlf injection
A vulnerability labeled as critical has been found in BINARY DataDog::DogStatsd up to 0.07 on Perl. This impacts the function
Read More
CVE-2026-48104 | mcmilk 7-Zip up to 26.00 SquashFS 7z.dll Open uninitialized resource (GHSL-2026-115)
A vulnerability marked as critical has been reported in mcmilk 7-Zip up to 26.00. Affected is the function Open in
Read More
CVE-2026-48103 | mcmilk 7-Zip up to 26.00 WimHandler.cpp SecurOffsets.Size out-of-bounds (GHSL-2026-115)
A vulnerability described as problematic has been identified in mcmilk 7-Zip up to 26.00. Affected by this vulnerability is the
Read More
CVE-2026-48111 | mcmilk 7-Zip up to 26.0 UEFI Firmware Image Parser UefiHandler.cpp IInArchive::Open opcode out-of-bounds (GHSL-2026-115)
A vulnerability classified as problematic has been found in mcmilk 7-Zip up to 26.0. Affected by this issue is the
Read More
CVE-2026-7473 | Arista EOS up to 4.36.0 Configuration incomplete comparison with missing factors
A vulnerability classified as problematic was found in Arista EOS up to 4.36.0. This affects an unknown part of the
Read More
CVE-2025-5088 | Arista EOS/CloudVision eXchange up to 4.34.1F Redis Service privileges management
A vulnerability, which was classified as critical, has been found in Arista EOS and CloudVision eXchange up to 4.30.x/4.31.8M/4.32.6M/4.33.4M/4.34.1F. This
Read More