https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 21:25:41 +0000 https://vulnerability.circl.lu/vuln/cve-2024-50611 <p><strong>Affected:</strong> cyclonedx cdxgen</p> <p>CycloneDX cdxgen through 10.10.7, when run against an untrusted codebase, may execute code contained within build-related files such as build.gradle.kts, a similar issue to CVE-2022-24441. cdxgen is used by, for example, OWASP dep-scan. NOTE: this has been characterized as a design limitation, rather than an implementation mistake.</p> <p><strong>Affected:</strong> cyclonedx cdxgen</p> <p>CycloneDX cdxgen through 10.10.7, when run against an untrusted codebase, may execute code contained within build-related files such as build.gradle.kts, a similar issue to CVE-2022-24441. cdxgen is used by, for example, OWASP dep-scan. NOTE: this has been characterized as a design limitation, rather than an implementation mistake.</p> https://vulnerability.circl.lu/vuln/cve-2024-50611 https://vulnerability.circl.lu/vuln/ghsa-hxf3-vgpm-fv9p <p><strong>Affected:</strong> npm: @cyclonedx/cdxgen</p> <p>CycloneDX cdxgen prior to 11.1.7, when run against an untrusted codebase, may execute code contained within build-related files such as build.gradle.kts, a similar issue to CVE-2022-24441. cdxgen is used by, for example, OWASP dep-scan. NOTE: this has been characterized as a design limitation, rather than an implementation mistake.</p> <p><strong>Affected:</strong> npm: @cyclonedx/cdxgen</p> <p>CycloneDX cdxgen prior to 11.1.7, when run against an untrusted codebase, may execute code contained within build-related files such as build.gradle.kts, a similar issue to CVE-2022-24441. cdxgen is used by, for example, OWASP dep-scan. NOTE: this has been characterized as a design limitation, rather than an implementation mistake.</p> https://vulnerability.circl.lu/vuln/ghsa-hxf3-vgpm-fv9p