Vulnerabilities
SaltStack Docs Repo CVE-2026-55675 Allows Fork-Based Secret Theft
A critical flaw in the Salty documentation repository allowed malicious pull requests to steal secrets via untrusted code execution, now patched.
CWE-94
Everything Threat Times has reported about CWE-94: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Critical Code Injection Flaw in dot-access npm Package Allows Remote Command Execution
A critical vulnerability in the dot-access package enables attackers to execute arbitrary operating system commands via crafted paths.