CWE-1357

CVEs per yearBy the year they were published

1. 20243
2. 20251
3. 20266

Newest CVEs

• CVE-2026-55675

  Salty documentation workflow executes fork-controlled Python build hooks with deployment secrets

  saltyorg · docs

  Critical10.0
• CVE-2026-85469

  Quay-builder-qemu: quay-builder-qemu: release workflow uses third-party action pinned to mutable @master with registry credentials in scope

  Red Hat · Red Hat Quay 3

  High8.0
• CVE-2026-67275

  Dell PowerProtect One, versions 20.1.0.0 and below, contain a Reliance on Insufficiently Trustworthy Component vulnerability. An unauthenticated attacker with…

  Dell · PowerProtect One

  Medium5.3
• CVE-2026-75569

  Mce-operator-bundle: all github actions pinned by mutable tag, not commit sha

  Red Hat · multicluster engine for Kubernetes 2.10

  High7.7
• CVE-2026-66783

  Submariner-operator: release workflow consumes same-org composite action via mutable @devel branch ref

  Red Hat · Red Hat Advanced Cluster Management for Kubernetes 2.16

  Medium4.4
• CVE-2026-47619

  NVIDIA Dynamo for Linux examples and recipes contain a vulnerability where an attacker could cause a system failure. A successful exploit of this vulnerability…

  NVIDIA · Dynamo

  Medium6.6
• CVE-2025-32800

  Conda-build vulnerable to supply chain attack vector due to pyproject.toml referring to dependencies not present in PyPI

  conda · conda-build

  High7.2
• CVE-2024-26024

  SUBNET Substation Server Reliance on Insufficiently Trustworthy Component

  SUBNET · Substation Server

  High8.6
• CVE-2024-28042

  SUBNET PowerSYSTEM Center Reliance on Insufficiently Trustworthy Component

  SUBNET · PowerSYSTEM Center

  High8.6
• CVE-2024-3313

  SUBNET PowerSYSTEM Server and Substation Server Reliance on Insufficiently Trustworthy Component

  SUBNET Solutions · PowerSYSTEM Server

  High8.6

Vendors it comes up for most

1. Red Hat3
2. SUBNET2
3. Dell1
4. NVIDIA1
5. SUBNET Solutions1
6. conda1
7. saltyorg1