Cloudflare Workers SDK CI/CD Exploit
Cloudflare Workers SDK had a CI/CD vulnerability where crafted branch names in pull requests could execute arbitrary commands on CI runners.
Tag: Cloudflare Workers SDK
Cordyceps CI/CD Flaws Expose 300+ GitHub Repositories to Supply-Chain Attacks
Cybersecurity researchers at Novee Security have identified a critical exploitable pattern in CI/CD workflows, codenamed Cordyceps, that allows unauthenticated attackers to hijack…