Known Vulnerabilities for Github-workflows by Kartverket
Listed below are 1 of the newest known vulnerabilities associated with "Github-workflows" by "Kartverket".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-56357 json | n8n before 1.123.15 and 2.5.0 contains a webhook forgery vulnerability in the GitHub Webhook Trigger node that fails to imple... | Not Provided | 2026-06-22 | 2026-06-23 |
| CVE-2026-55576 json | MaaAssistantArknights is a one-click tool for daily Arknights tasks. In the current dev-v2 workflow, .github/workflows/releas... | Not Provided | 2026-07-15 | 2026-07-18 |
| CVE-2026-50562 json | FastGPT is a knowledge-based AI application platform. At commit 22ebfacbb43311e9b73294040ae0eb87390c6bba and earlier, artifac... | Not Provided | 2026-07-15 | 2026-07-15 |
| CVE-2026-46420 json | setup-php is a GitHub action to set up PHP with extensions, php.ini configuration, coverage drivers, and tools. From 2.25.0 p... | Not Provided | 2026-07-17 | 2026-07-20 |
| CVE-2026-45758 json | Guardrails AI is a Python framework that helps build AI applications. On May 11, 2026 at approximately 6:00 PM Pacific, an at... | Not Provided | 2026-06-05 | 2026-06-05 |
| CVE-2026-44723 json | Vowpal Wabbit is a machine learning system. The workflow .github/workflows/python_checks.yml embeds ${{ github.event.pull_req... | Not Provided | 2026-05-26 | 2026-05-28 |
| CVE-2026-44246 json | nnU-Net is a semantic segmentation framework that automatically adapts its pipeline to a dataset. Prior to 2.4.1, the nnU-Net... | Not Provided | 2026-05-12 | 2026-05-13 |
| CVE-2026-42603 json | OWASP BLT is a QA testing and vulnerability disclosure platform that encompasses websites, apps, git repositories, and more. ... | Not Provided | 2026-05-11 | 2026-05-11 |
| CVE-2026-42298 json | Postiz is an AI social media scheduling tool. Prior to commit da44801, a "Pwn Request" vulnerability in the Build and Publish... | Not Provided | 2026-05-08 | 2026-05-11 |
| CVE-2026-41414 json | Skim is a fuzzy finder designed to through files, lines, and commands. The generate-files job in .github/workflows/pr.yml che... | Not Provided | 2026-04-24 | 2026-04-27 |