Zuke-build

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 5
    Known Exploited: 0
    0
    Critical Level Threats
    4
    High Level Threats
    1
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-119291

    zuke setup and zuke import follow symbolic links planted at scaffold names, allowing writes outside the target directory

    Last Modified: Oct 30, 2026
    Published: Oct 30, 2026

    CVE-2026-119290

    Zuke: Resolved secret() values are written to GITHUB_STEP_SUMMARY in the clear, disclosing them to anyone who can view the workflow run

    Last Modified: Oct 30, 2026
    Published: Oct 30, 2026

    CVE-2026-119289

    Zuke: githubWorkflow adopts any workflow run whose title matches its marker, so anyone who can dispatch the workflow can satisfy or block a release gate

    Last Modified: Oct 30, 2026
    Published: Oct 30, 2026

    CVE-2026-119288

    Zuke: Argument injection on Windows: batch shims are launched through cmd.exe, which re-parses the command line

    Last Modified: Oct 30, 2026
    Published: Oct 30, 2026

    CVE-2026-119287

    Zuke: Command-form registry descriptors bypass the MCP launch policy

    Last Modified: Oct 30, 2026
    Published: Oct 30, 2026
    Items Per Page