https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:01:12 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-75569 <p>A flaw was found in mce-operator-bundle. The build process fetches and executes scripts from a remote repository without performing integrity checks, such as commit pinning or signature verification. This allows a malicious actor with write access to the remote repository to inject and execute arbitrary code during the build. The consequence is a compromised build process, potentially leading to the distribution of malicious software.</p> <p>A flaw was found in mce-operator-bundle. The build process fetches and executes scripts from a remote repository without performing integrity checks, such as commit pinning or signature verification. This allows a malicious actor with write access to the remote repository to inject and execute arbitrary code during the build. The consequence is a compromised build process, potentially leading to the distribution of malicious software.</p> https://db.gcve.eu/vuln/fkie_cve-2026-75569 https://db.gcve.eu/vuln/ghsa-77qj-pc4h-hxwh <p>A flaw was found in mce-operator-bundle. The build process fetches and executes scripts from a remote repository without performing integrity checks, such as commit pinning or signature verification. This allows a malicious actor with write access to the remote repository to inject and execute arbitrary code during the build. The consequence is a compromised build process, potentially leading to the distribution of malicious software.</p> <p>A flaw was found in mce-operator-bundle. The build process fetches and executes scripts from a remote repository without performing integrity checks, such as commit pinning or signature verification. This allows a malicious actor with write access to the remote repository to inject and execute arbitrary code during the build. The consequence is a compromised build process, potentially leading to the distribution of malicious software.</p> https://db.gcve.eu/vuln/ghsa-77qj-pc4h-hxwh https://db.gcve.eu/vuln/rhsa-2026:59634 <p>mce-operator-bundle: All GitHub Actions pinned by mutable tag, not commit SHA</p> <p>mce-operator-bundle: All GitHub Actions pinned by mutable tag, not commit SHA</p> https://db.gcve.eu/vuln/rhsa-2026:59634