Threats tagged 'ghsa-x69p-8pq9-76r7'

OpsTree BuildPiper versions prior to 2.7.0 have an authorization bypass vulnerability that allows authenticated users to link pipeline stages to environments of other projects by using a foreign project environment identifier. This flaw enables cross-project associations that bypass intended project separation controls.