zuke-build zuke güvenlik açıkları
zuke-build
- Toplam açık
- 5
- Kritik
- 0
- Aktif istismar
- 0
- Yaması çıkan
- 5
- Son açık
- 3 sa önce
Önem dağılımı
- Kritik 0
- Yüksek 4
- Orta 1
- Düşük 0
Son açıklar
5 açık
- 5,5Orta CVE-2026-119291Yama var zuke setup and zuke import follow symbolic links planted at scaffold names, allowing writes outside the target directory
- 7,5Yüksek CVE-2026-119290Yama var Zuke: Resolved secret() values are written to GITHUB_STEP_SUMMARY in the clear, disclosing them to anyone who can view the workflow run
- 7,1Yüksek CVE-2026-119289Yama var Zuke: githubWorkflow adopts any workflow run whose title matches its marker, so anyone who can dispatch the workflow can satisfy or block a release gate
- 7,0Yüksek CVE-2026-119288Yama var Zuke: Argument injection on Windows: batch shims are launched through cmd.exe, which re-parses the command line
- 8,0Yüksek CVE-2026-119287Yama var Zuke: Command-form registry descriptors bypass the MCP launch policy