Threats tagged 'ghsa-g64m-6hp6-x57p'

OpsTree BuildPiper versions prior to 2.7.0 contain a path traversal vulnerability that allows authenticated users to read arbitrary files by supplying traversal sequences in Additional Manifest file paths. This can lead to exposure of sensitive files such as configuration files and service-account tokens embedded in generated manifests and logs.