CWE-1357
10 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 10Published CVEs10 of them scored
- 6Last 12 monthspublished in the last year
- 1Critical6 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-55675
Salty documentation workflow executes fork-controlled Python build hooks with deployment secrets
saltyorg · docs
Critical10.0 - CVE-2026-85469
Quay-builder-qemu: quay-builder-qemu: release workflow uses third-party action pinned to mutable @master with registry credentials in scope
Red Hat · Red Hat Quay 3
High8.0 - CVE-2026-67275
Dell PowerProtect One, versions 20.1.0.0 and below, contain a Reliance on Insufficiently Trustworthy Component vulnerability. An unauthenticated attacker with…
Dell · PowerProtect One
Medium5.3 - CVE-2026-75569
Mce-operator-bundle: all github actions pinned by mutable tag, not commit sha
Red Hat · multicluster engine for Kubernetes 2.10
High7.7 - CVE-2026-66783
Submariner-operator: release workflow consumes same-org composite action via mutable @devel branch ref
Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2.16
Medium4.4 - CVE-2026-47619
NVIDIA Dynamo for Linux examples and recipes contain a vulnerability where an attacker could cause a system failure. A successful exploit of this vulnerability…
NVIDIA · Dynamo
Medium6.6 - CVE-2025-32800
Conda-build vulnerable to supply chain attack vector due to pyproject.toml referring to dependencies not present in PyPI
conda · conda-build
High7.2 - CVE-2024-26024
SUBNET Substation Server Reliance on Insufficiently Trustworthy Component
SUBNET · Substation Server
High8.6 - CVE-2024-28042
SUBNET PowerSYSTEM Center Reliance on Insufficiently Trustworthy Component
SUBNET · PowerSYSTEM Center
High8.6 - CVE-2024-3313
SUBNET PowerSYSTEM Server and Substation Server Reliance on Insufficiently Trustworthy Component
SUBNET Solutions · PowerSYSTEM Server
High8.6