Developer Tools

In Argo CD versions before 3.2.12, 3.3.10, and 3.4.2 a medium severity vulnerability CVE-2026-45737 was detected. This vulnerability allows attackers to view sensitive Kubernetes Secret values in UI or CLI diffs. To address this issue, users should upgrade Argo CD to version 3.2.12 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-45737.

In Argo CD versions prior to 3.2.12, 3.3.10, and 3.4.2 a high severity vulnerability CVE-2026-45738 was detected. This vulnerability allows attackers to execute arbitrary javascript in a victim’s browser session. To address this issue, users should upgrade Argo CD to version 3.2.12 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-45738.

In Nexus Repository a high severity vulnerability CVE-2026-11403 was detected. This vulnerability allows a remote attacker to gain unauthorized access to repository operations. To address this issue, users should upgrade Nexus Repository to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-11403.

In OpenShift earlier versions a high severity vulnerability CVE-2026-15584 was detected. This vulnerability allows an attacker to escalate privileges and gain root access on cluster nodes. To address this issue, users should upgrade OpenShift to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-15584.

In guardrails-detectors component for OpenShift in older versions a medium severity vulnerability CVE-2026-15154 was detected. This vulnerability allows a remote attacker to cause a denial of service. To address this issue, users should upgrade OpenShift to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-15154.

In Terraform a high severity vulnerability CVE-2026-14468 was detected. This vulnerability allows an authenticated user to include files from outside the intended repository content in a module and then download them, potentially exposing sensitive files. To address this issue, users should upgrade Terraform to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-14468.

In Forgejo versions before 15.0.3 a medium severity vulnerability CVE-2026-59102 was detected. This vulnerability allows authenticated attackers to execute arbitrary JavaScript in other users’ browsers. To address this issue, users should upgrade Forgejo to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-59102.

In Plane versions 4.6.3 and earlier a critical severity vulnerability CVE-2026-38971 was detected. This vulnerability allows an attacker to access sensitive information or cause a denial of service. To address this issue, users should upgrade Plane to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-38971.

In Script Security Plugin component for Jenkins versions 1402.v94c9ce464861 and earlier a high severity vulnerability CVE-2026-57280 was detected. This vulnerability allows attackers to bypass sandbox protection. To address this issue, users should upgrade Script Security Plugin to version 1402.1405.vc96e74964250 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-57280.