oss-security·2d agoCVE-2026-97636: Apache Airflow HashiCorp provider: HashiCorp Vault secrets backend: team-scope guard bypass via user-controlled key#apache-airflow#hashicorp#vaultCVE-2026-97636
Infosecurity Magazine·3d ago highHundreds of Leaked GitHub App Keys Still Authenticate#github#gitguardian#secrets 2 sources 2 min
Lobsters · security·4d agoGitHub Actions leaking secrets when Miri output is cached#rust#miri#github-actions 4 min
oss-security·10d agoCVE-2026-81866: Apache NiFi: Missing Authorization for Assets and Secrets Referenced by Connector Configuration#access-control#apache#authorization-bypassCVE-2026-81866 5 sources
oss-security·11d agoCVE-2026-86465: Apache Airflow Akeyless provider: Akeyless secrets backend: team-scope guard bypass via user-controlled key#access-control#akeyless#apache-airflowCVE-2026-86465
oss-security·16d agoCVE-2026-80354: Apache Camel K: Camel K Builder trait mavenProfiles ValueSources resolve tenant-named secrets in operator namespace#apache#authorization-bypass#camel-kCVE-2026-803541