Threats tagged 'ghsa-w8pv-mr4h-2g9v'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.3	CVE-2026-127082Huginn before 2026.11.09 contains an information exposure vulnerability in JqAgent that allows authenticated users to High8.32026-11-13GCVE DatabaseCVE-2026-127082 Huginn versions before 2026.11.09 have an information exposure vulnerability in the JqAgent component. Authenticated users who can create, configure, or dry-run a JqAgent may exploit this flaw to read the server process environment. This occurs because the jq child process inherits the environment, allowing attackers to disclose sensitive secrets such as APP_SECRET_TOKEN, database credentials, SMTP, and OAuth secrets. Report on CVE-2026-127082 Vulnerability CWE-497 #ghsa-w8pv-mr4h-2g9v	GCVE Database	2026-11-13

Page 1 of 1