New vulnerabilities – clearly explained

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Zuke @zuke/core: Secret values disclosed in GitHub Actions job summary

Zuke's @zuke/core writes rendered reportSummary notes to the GitHub Actions job summary without applying the redaction used for resolved secret() values in console and run output. If a build places secret-derived text in a summary note, the credential is published in cleartext to everyone who can view the workflow run, including unauthenticated viewers of public repositories. The summary stays exposed until the run is deleted, and GitHub Actions masking does not protect it. Runs outside GitHub Actions and builds that do not summarize secret-derived text are not affected.

zuke-build · Zuke (@zuke/core)

Zuke @zuke/gh: Improper verification of workflow run in githubWorkflow gate

The githubWorkflow gate of the @zuke/gh package correlates an external GitHub Actions workflow run only by a title marker that is visible to anyone who can list runs and can be copied by another dispatcher. If the external workflow repository grants workflow_dispatch permission to a party the releasing repository does not fully trust, that party can dispatch a run with the marker and make the gate adopt its result without checking event, ref or creation time. A passing run can thereby authorize an unvalidated release, and a failed or cancelled run can block a valid one; the adopted run ID persists across build resume.

zuke-build · Zuke (@zuke/gh)

Zuke: OS command injection via cmd.exe on Windows batch shims

Zuke's @zuke/core package launches Windows .cmd and .bat tools through cmd /c, so cmd.exe re-parses the command line. If a build on Windows resolves a tool from node_modules/.bin and passes attacker-influenced text containing an unquoted &, | or ^, an additional attacker-chosen command runs in the build's context with access to its credentials. POSIX platforms are not affected.

zuke-build · Zuke

Zuke: Missing authorization of command-form registry descriptors in MCP mode

The @zuke/core MCP registry mode accepts command-form registry descriptors without applying the launch host authorization that is enforced for remote module descriptors. If a run-capable caller invokes the affected tool while zuke mcp --registry --allow-run reads a registry writable by a third party, the registry writer can choose the program and arguments that run with the operator's environment and workspace access. Exploitation requires write access to such a registry and a run-capable caller; the local default registry filled by zuke register is not affected.

zuke-build · zuke

Tenda W18E: OS command injection in diagnose packet-capture feature

The web management server (httpd) of the Tenda W18E router does not properly validate JSON fields of the "diagnose" packet-capture feature. Values in the protocol or targetDevice fields are concatenated into a tcpdump command and run with root privileges. According to the description, an authenticated user can exploit this, and the device can also be exploited without authentication in its factory-reset state. A public proof-of-concept exists, and no vendor fix has been found.

Tenda · W18E

Traggo server: Uncontrolled resource consumption via GraphQL aliases

The GraphQL endpoint of Traggo server v0.8.3 accepts an unlimited number of aliased fields and has no request body size limit. The version field can be queried without authentication, so a single crafted POST request with many aliases can pin a CPU core and consume about 1 GB of RAM. Parallel requests can push the process into out-of-memory conditions and stop the service. Confidentiality and integrity are not affected according to the CVSS vector.

Traggo · Traggo server

astro-notion-blog: Path traversal in FeaturedImage download leads to file overwrite

astro-notion-blog 0.13.0 does not confine the local file path when it downloads a FeaturedImage from a remote URL. A crafted URL with encoded path separators lets an attacker write and overwrite files outside the intended directory, and the reporter shows that an overwritten page can run code during the build. The attacker needs edit access to the Notion database that feeds the blog, and the build host must reach the attacker's URL. Severity scores differ between sources (NVD 7.5, reporter 8.8, VulDB 6.3).

otoyo · astro-notion-blog

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

SUSE Rancher Fleet: Cluster identity takeover during cluster registration

Fleet, the GitOps component of SUSE Rancher, accepted the cluster identity claimed in a registration request without binding it to the registration token used. An attacker holding a valid registration token for a Fleet workspace and knowing the client identifier of another cluster in that workspace can obtain credentials for that cluster's Fleet management namespace. This can expose Secrets and ConfigMaps synced there, allow limited changes to status information, and disrupt Fleet management of the affected cluster. Cross-tenant impact is possible where clusters of different tenants share one workspace.

SUSE · Rancher Fleet

Scribus: Out-of-bounds memory access in SVM import plugin

Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an out-of-bounds memory access in the importsvm plugin, which does not verify that bitmap and transparency mask dimensions match. An attacker can supply a crafted SVM file with mismatched mask dimensions to trigger heap reads and writes, causing crashes or code execution with the rights of the user. Exploitation requires that a user opens or imports the malicious file.

Scribus · Scribus

Scribus: Heap buffer overflow in PICT image loader

Scribus versions before 1.6.7 and 1.7.x before 1.7.4 contain a heap buffer overflow in the Mac PICT image loader and import plugin when unpacking 4-bit indexed pixel data. An attacker can supply a crafted PICT file with inconsistent width and row data that writes out of bounds when the file is placed or imported, causing crashes or possibly code execution. Exploitation requires a user to open or import the malicious file.

Scribus · Scribus

Scribus: Heap out-of-bounds write in Micrografx Draw (DRW) import

Scribus versions before 1.6.7 and 1.7.x before 1.7.4 contain a heap out-of-bounds write in the DRW import plugin for Micrografx Draw files. The plugin uses an unvalidated y offset to select image scanlines. A crafted DRW file that a user imports can write decoded bitmap data outside the heap buffer, which can crash Scribus or lead to code execution.

Scribus · Scribus

Scribus: Heap overflow in TIFF loader via crafted tile dimensions

Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an integer overflow in the TIFF image loader. A tiled TIFF file with crafted tile width, height and sample values can cause a heap overflow. An attacker who gets a user to open or import such a file can crash Scribus or possibly execute code in the user's session.

Scribus · Scribus

Scribus: Out-of-bounds read in Mac PICT image loader

Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an out-of-bounds read in the Mac PICT image loader and import plugin when decoding planar pixel data. An attacker can supply a crafted PICT file with manipulated dimensions that, when placed or imported, causes heap over-reads. This can crash Scribus or disclose heap memory contents. Exploitation requires a user to open or import the malicious file.

The Scribus Team · Scribus

Scribus: Heap buffer overflow in PICT image loader

Scribus versions before 1.6.7 and 1.7.x before 1.7.4 contain a heap buffer overflow in the PICT image loader and import plugin. An attacker can craft a PICT file whose bytesPerLine value exceeds the image scanline size, which corrupts heap memory. If a user places or imports such a file, Scribus may crash or execute code with the user's privileges.

Scribus · Scribus

Scribus: Heap out-of-bounds write via crafted PSD file

Scribus versions before 1.6.7 (and 1.7.x before 1.7.4) contain a heap out-of-bounds write in the PSD image loader, which uses unchecked values from the PSD file as array indexes. An attacker who convinces a user to place or import a crafted PSD file can corrupt heap memory, causing a crash and potentially code execution with the user's rights. No network service is involved, but user interaction is required.

Scribus · Scribus

Google Cloud Application Integration: Unsafe deserialization in SubWorkflow task

A deserialization of untrusted data vulnerability (CWE-502) in the SubWorkflow task of Google Cloud Application Integration allows an authenticated attacker to execute arbitrary code by sending a maliciously crafted serialized object. The flaw affects the managed service on Google Cloud Platform before 11 September 2026, and Google has already patched it. CVSS 4.0 rates it critical (9.4), but exploitation requires valid access to the service.

Google Cloud · Application Integration

Research and translation in progress – available shortly.

SOCFortress CoPilot: Missing authorization and authentication bypass in Velociraptor Sigma exclusions

SOCFortress CoPilot before 0.1.77 exposes Velociraptor Sigma exclusion rules that are used to suppress alerts before incidents are created. The create endpoint does not validate the Bearer token, and the management endpoints do not check roles, so any authenticated customer_user can read, change, disable or delete all exclusions. An attacker with a forged, expired or invalid token can create suppression rules, and rules with a null customer_code apply to all tenants, which allows detections to be hidden platform-wide.

SOCFortress · CoPilot