← All credits

Red Hat would like to thank EVIL0RD (GitHub: https://github.com/EVIL0RD - warlockdarkarmy@gmail.com) for reporting this issue.

4 vulnerability records and advisories credit this contributor.

CVE-2026-116964

Konflux-ci: remote code execution via eval() in manifest scripts

CVE-2026-116086

Konflux-ci: jq filter injection in github workflow issue management

CVE-2026-116958

Konflux-ci: unquoted variable expansion in shell command execution

CVE-2026-114217

Konflux-ci: github token plaintext exposure in ci/cd scripts