astropod sign in

news

Product news and updates from the Gastropod team.

tagged ci-cd-security ×

GitLab CVE-2026-85706 Lets Unauthenticated Attackers Read Server Files; Probing Began the Morning After the Patch 2026-09-18 03:28:59 · Chris vulnerability-intelligence software-supply-chain-security gitlab

+3
ci-cd-security path-traversal cisa-kev
Compromised JetBrains Cadence due to TeamCity Sever vulnerabilities 2026-09-06 13:09:55 · Chris vulnerability-intelligence software-supply-chain-security ci-cd-security

+3
teamcity jetbrains credential-theft
JFrog Artifactory Authentication Bypass Exploited 2026-09-05 03:49:21 · Chris vulnerability-intelligence software-supply-chain-security artifact-registry

+3
authentication-bypass cisa-kev ci-cd-security
Fourteen npm Packages Working as intended (except for that pesky Linux Backdoor feature) 2026-08-26 02:18:52 · Chris vulnerability-intelligence software-supply-chain-security npm

+3
credential-theft ci-cd-security malware
77 Counterfeit Open VSX Extensions, with a Config File That Keeps Installing The 2026-08-06 03:45:21 · last edited 2026-08-06 03:48:28 · Chris software-supply-chain-security vulnerability-intelligence ide-extensions

+3
open-vsx ci-cd-security credential-theft
No Login Required: TeamCity's Critical RCE and Your Build 2026-08-01 14:21:36 · Chris vulnerability-intelligence software-supply-chain-security ci-cd-security

+3
remote-code-execution teamcity jetbrains
Langflow's Fifth CIS-KEV CVE in a year 2026-07-25 02:48:46 · Chris vulnerability-intelligence software-supply-chain-security ci-cd-security
Borrowed Compute: How Ten Packagist Libraries Turned GitHub Actions Into an Attack Botnet 2026-07-24 02:49:49 · Chris vulnerability-intelligence software-supply-chain-security composer

+3
github-actions ci-cd-security sbom
Inside the AsyncAPI "Miasma" Attack: When the Pipeline Itself Becomes the Attacker 2026-07-16 00:34:52 · Chris vulnerability-intelligence software-supply-chain-security supply-chain-attack

+3
npm ci-cd-security github-actions