https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T22:07:33.055869+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2024-50611 CVE-2024-50611 2026-09-29T22:07:33.387193+00:00

Affected: cyclonedx cdxgen

CycloneDX cdxgen through 10.10.7, when run against an untrusted codebase, may execute code contained within build-related files such as build.gradle.kts, a similar issue to CVE-2022-24441. cdxgen is used by, for example, OWASP dep-scan. NOTE: this has been characterized as a design limitation, rather than an implementation mistake.

 https://vulnerability.circl.lu/vuln/ghsa-hxf3-vgpm-fv9p GHSA-hxf3-vgpm-fv9p — CycloneDX cdxgen may execute code contained within build-related files 2026-09-29T22:07:33.387296+00:00

Affected: npm: @cyclonedx/cdxgen

CycloneDX cdxgen prior to 11.1.7, when run against an untrusted codebase, may execute code contained within build-related files such as build.gradle.kts, a similar issue to CVE-2022-24441. cdxgen is used by, for example, OWASP dep-scan. NOTE: this has been characterized as a design limitation, rather than an implementation mistake.