tag
Shell-Injection
Critical
tj-actions/branch-names GitHub Actions Command Injection (CVE-2025-54416)
CVE-2025-54416·
tj-actions/branch-names GitHub Action
patched
Critical
Spinnaker Clouddriver — Git Clone Shell Injection RCE (CVE-2026-32604)
CVE-2026-32604 (CWE-78)·
Spinnaker (Clouddriver service) — continuous delivery / multi-cloud orchestration platform
unpatched
High
Red Hat Cockpit `logsJournal.jsx` Shell Injection RCE (CVE-2026-4802)
CVE-2026-4802·
Red Hat Cockpit — the web-based Linux system administration console (cockpit-project.org), specifically pkg/systemd/logsJournal.jsx. **Not** to be confused with the headless "Cockpit CMS".
unpatched