Vulnerability research and advisories

Actionable writeups with exploit context, metadata, and practical remediation details.

Template injection vector in CI pipeline variables
Analysis of a templating flaw that allows untrusted input to alter build-time commands.
Feb 10, 2026 • high
CWE-94 CVE-2026-10001
Container registry token exposure through verbose logs
Leaked registry credentials observed in debug-level CI logs and artifact bundles.
Jan 26, 2026 • medium
CWE-532
Infrastructure policy bypass via nested module inheritance
A misconfiguration pattern in IaC modules can bypass deny rules under specific nesting conditions.
Dec 5, 2025 • critical
CWE-284 CVE-2025-23088

No matching content found.