Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 13 Nov 2026 13:59:56 +0000 CVE-2026-127082 — Huginn before 2026.11.09 Information Exposure via JqAgent jq env Builtin https://db.gcve.eu/vuln/cve-2026-127082 <p><strong>Affected:</strong> huginn</p> <p>Huginn before 2026.11.09 contains an information exposure vulnerability in JqAgent that allows authenticated users to read the server process environment because the jq child process inherits it. Attackers who can create, configure or dry-run a JqAgent can supply a filter using env or $ENV to disclose APP_SECRET_TOKEN, database, SMTP and OAuth secrets.</p> <p><strong>Affected:</strong> huginn</p> <p>Huginn before 2026.11.09 contains an information exposure vulnerability in JqAgent that allows authenticated users to read the server process environment because the jq child process inherits it. Attackers who can create, configure or dry-run a JqAgent can supply a filter using env or $ENV to disclose APP_SECRET_TOKEN, database, SMTP and OAuth secrets.</p> https://db.gcve.eu/vuln/cve-2026-127082