JetBrains: Developer Tools and TeamCity Vendor
JetBrains is a software company known for developer tools and the TeamCity CI/CD server. It patched CVE-2026-63077 and provided guidance for on-premise…
Tag: CI/CD
actions/checkout: GitHub Action for Repository Checkout
actions/checkout is the official GitHub action for checking out a repository into the workflow runner. It was updated to block common pwn…
GitHub Actions Workflow Injection Vulnerability in Snowflake Repo
A GitHub Actions workflow injection vulnerability allowed crafted issues to execute commands in a CI/CD pipeline. The flaw was fixed by using…
Python Software Foundation’s Black Tool Compromised by Cordyceps
The Python Software Foundation's Black tool was affected by the Cordyceps flaw, allowing a single pull request to execute attacker code and…
Azure Sentinel CI/CD Vulnerability
Microsoft's Azure Sentinel was found to have a CI/CD workflow weakness that allowed unauthenticated attackers to run code and steal credentials via…
Google AI Agent Development Kit CI/CD Flaw
Google's AI Agent Development Kit (adk-samples) had a CI/CD vulnerability enabling attacker code execution and repository takeover via pull requests.
Apache Doris Zero-Click CI/CD Attacks
Apache Doris was vulnerable to zero-click CI/CD attacks that allowed code execution and credential theft through pull request comments.
Cloudflare Workers SDK CI/CD Exploit
Cloudflare Workers SDK had a CI/CD vulnerability where crafted branch names in pull requests could execute arbitrary commands on CI runners.
Python Black Tool CI/CD Vulnerability
The Python Software Foundation's Black tool had a CI/CD flaw allowing pull requests to execute attacker code and steal automation tokens.