https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 10:15:12 +0000 https://db.gcve.eu/vuln/cve-2026-77157 <p><strong>Affected:</strong> Checkmarx github.com/checkmarx/ast-cli</p> <p>ast-cli downloads two helper binaries, the Vorpal ASCA real-time engine and the SCA Resolver, from &#34;download.checkmarx.com&#34; as part of its auto-update flow, triggered by the Checkmarx’s &#34;VSCode/JetBrains&#34; extensions and by cx scan &#34;sca-realtime&#34;.</p> <p>Prior to the fix, the downloaded archive was not verified against a checksum before extraction and execution. An attacker able to substitute the served archive could deliver an arbitrary binary that ast-cli would extract and execute the contents of the archive, since no integrity check was performed on the download.</p> <p>Successful exploitation requires compromising &#34;download.checkmarx.com&#34; and replacing the served archive with one containing an attacker-controlled binary. If the served archive had been replaced that way, any developer machine or CI pipeline invoking ASCA (via Checkmarx&#39;s VSCode/JetBrains extensions) or cx scan &#34;sca-realtime&#34; on an affected version would have extracted and executed that binary in place of the intended download.</p> <p>The download is now verified against a published SHA-256 checksum before extraction.</p> <p><strong>Affected:</strong> Checkmarx github.com/checkmarx/ast-cli</p> <p>ast-cli downloads two helper binaries, the Vorpal ASCA real-time engine and the SCA Resolver, from &#34;download.checkmarx.com&#34; as part of its auto-update flow, triggered by the Checkmarx’s &#34;VSCode/JetBrains&#34; extensions and by cx scan &#34;sca-realtime&#34;.</p> <p>Prior to the fix, the downloaded archive was not verified against a checksum before extraction and execution. An attacker able to substitute the served archive could deliver an arbitrary binary that ast-cli would extract and execute the contents of the archive, since no integrity check was performed on the download.</p> <p>Successful exploitation requires compromising &#34;download.checkmarx.com&#34; and replacing the served archive with one containing an attacker-controlled binary. If the served archive had been replaced that way, any developer machine or CI pipeline invoking ASCA (via Checkmarx&#39;s VSCode/JetBrains extensions) or cx scan &#34;sca-realtime&#34; on an affected version would have extracted and executed that binary in place of the intended download.</p> <p>The download is now verified against a published SHA-256 checksum before extraction.</p> https://db.gcve.eu/vuln/cve-2026-77157