Threat Intelligence Database

CVE-2026-105767 is an OS command injection vulnerability in the integrate-platform-docs composite GitHub Action of Chainguard Academy (edu). The flaw arises from improper neutralization of special elements in inputs used directly in Bash gcloud storage cp commands. This allows an actor controlling the project_id or storage_bucket inputs to execute arbitrary shell commands on the GitHub Actions runner. However, the only known caller passes repository secrets and runs on trusted triggers, so untrusted inputs were not known to reach the vulnerable code. The CVSS score is low (2.1).

CVE-2026-105766 is a low-severity vulnerability in Chainguard Academy (edu) involving cleartext transmission of sensitive information. The issue arises from the use of the $scheme variable in nginx.conf for trailing-slash directory redirects, which causes HTTPS requests for slashless directory paths to be redirected to HTTP URLs. This occurs because TLS terminates at the load balancer, and the redirect response uses HTTP, exposing content to on-path attackers. Browsers with HSTS preload support for the .dev domain are not affected, but clients without HSTS enforcement, such as command-line HTTP clients and scripts, are vulnerable.