Skip to content
Threat Feed
Subscribe

Tag

Dependency-Management

2 briefs RSS
high advisory

Credential Disclosure in Renovate via Malicious Pagination Links

Renovate improperly validates HTTP 'Link' headers during GitHub API interactions, allowing a compromised GitHub server to exfiltrate configured credentials by redirecting pagination requests to an attacker-controlled host.

Renovate +5 credential-access supply-chain vulnerability supply-chain-security credential-theft nuget dependency-management
1t 1c
high advisory

Multiple Vulnerabilities in Composer Dependency Manager

Composer contains multiple vulnerabilities that allow a remote attacker to bypass security restrictions and execute arbitrary code on systems using the dependency manager.

Composer vulnerability dependency-management rce
1t