// stack
Dev tools & CI
Security incidents affecting self-hosted git, CI/CD, artifact registries and editor extensions. Newest first.
- incidents
- 11
- live
- 3
- patched
- 10
## 11 Dev tools & CI incidents in the last year
through Oct 22, 2026- criticallivepatchedsince Oct 21, 2026
GitLab CVSS 10 unauthenticated RCE via regex compiler (CVE-2026-110264)
› GitLab CE/EE (self-managed)
GitLab released a critical patch on Oct 21 2026 for CVE-2026-110264: an integer overflow in the bundled Onigmo / regex compiler that can allow an unauthenticated attacker to execute code on self-managed GitLab. CVSS 10.0; every CE/EE version from 7.0 (2014) is in range. Instances that only applied the Oct 12 regex fix remain vulnerable and must upgrade again.
CVE-2026-110264 - criticallivepatchedsince Oct 19, 2026
OpenCode: malicious MCP server can run code on Windows/WSL during sign-in (no CVE)
› OpenCode AI coding agent (Anomaly) on Windows and WSL
A command-injection flaw in the OpenCode AI coding agent let a malicious or later-hijacked remote MCP server run PowerShell commands on a developer's Windows or WSL machine when they started the MCP OAuth sign-in. The server-supplied authorization endpoint was passed unescaped to an old version of the open package. Anomaly fixed it in 1.18.33 on Sep 28 without a CVE or advisory, so scanners won't flag 1.0.137 through 1.18.32. macOS and Linux are not affected. Pillar Security found it and rates it 9.8; no in-the-wild exploitation reported.
- highlivepartial fixsince Oct 8, 2026
GhostAction returns: hijacked GitHub accounts push secret-stealing 'security audit' workflows to 30k+ repos
› GitHub repositories / GitHub Actions (compromised maintainer accounts)
GhostAction, a campaign first documented by GitGuardian in Sept 2025, came back in 2026. It hit 772 repos in Aug-Sep 2026, then surged on Oct 8-12: about 1,900 compromised GitHub accounts pushed fake 'security audit' workflows to 30,000+ repositories (GitGuardian). The new payload exfiltrates the repo's Actions secrets plus every credential found in the full git history to 193.32.204.199 over plain HTTP. GitHub began preventing the workflow from running around Oct 9. The operator moved on to GitHub-themed phishing (my-github.com) and a VS Code tasks.json + fake .woff2 font stealer found in 94 repos.
show 8 older incidents8 older incidents
September 2026 3
highGitLab Community Edition and Enterprise Edition: GitLab Community Edition and Enterprise Edition Path Traversal Vulnerabilitypatched
› GitLab Community Edition and Enterprise Edition patched
GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows an unauthenticated user to read arbitrary files due to an improper path confinement and missing authentication enforcement in the repository commits API. Added to CISA KEV on 2026-09-11.
open incident →CVE-2026-85706highJFrog Artifactory: JFrog Artifactory Incorrect Authorization Vulnerabilitypatched
› JFrog Artifactory patched
JFrog Artifactory contains an incorrect authorization vulnerability that leads to a privilege escalation attack due to a validation check of the token signature/issuer and not the token’s scope. CISA added CVE-2026-42016, CVE-2026-42018 to the Known Exploited Vulnerabilities catalog on 2026-09-11 based on evidence of active exploitation.
open incident →CVE-2026-42016 · CVE-2026-42018highJFrog Artifactory: JFrog Artifactory Improper Authentication Vulnerabilitypatched
› JFrog Artifactory patched
JFrog Artifactory contains an improper authentication vulnerability that under default configuration can allow an unauthenticated attacker with network access to obtain administrative privileges. Added to CISA KEV on 2026-09-02.
open incident →CVE-2026-82329
August 2026 3
highJFrog Artifactory: JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerabilitypatched
› JFrog Artifactory patched
JFrog Artifactory contains an improper limitation of a pathname to a restricted directory vulnerability. This can allow an authenticated user to write data outside the intended Docker cache path under specific remote-repository conditions. Added to CISA KEV on 2026-08-27.
open incident →CVE-2026-66384highGitea Gitea: Gitea Code Injection Vulnerabilitypatched
› Gitea Gitea patched
Gitea contains a code injection vulnerability that allows an attacker with repository write access to send a malicious patch to the diffpatch API endpoint to plant an executable Git hook and run shell commands as the Gitea service account. Added to CISA KEV on 2026-08-25.
open incident →CVE-2026-60004highJetBrains TeamCity: JetBrains TeamCity Deserialization of Untrusted Data Vulnerabilitypatched
› JetBrains TeamCity patched
JetBrains TeamCity contains a deserialization of untrusted data vulnerability that could allow unauthenticated remote code execution via the agent polling protocol. Added to CISA KEV on 2026-08-05.
open incident →CVE-2026-63077
May 2026 1
highNx Nx Console: Nx Console Embedded Malicious Code Vulnerabilitypatched
› Nx Nx Console patched
Nx Console contains an embedded malicious code vulnerability that allowed a malicious version of Nx Console to be published. The compromised extension fetched an obfuscated payload that could harvested credentials from multiple sources on disk and in memory. Added to CISA KEV on 2026-05-27.
open incident →CVE-2026-48027
March 2026 1
criticalTeamPCP supply-chain campaign: Trivy → Checkmarx GitHub Actionspatched
› Aqua Trivy, trivy-action, setup-trivy, Checkmarx AST/KICS GitHub Actions, related Docker/VS Code artifacts patched
Threat actors tracked as TeamPCP compromised Trivy releases and GitHub Actions (including trivy-action / setup-trivy), then expanded into Checkmarx AST and KICS Actions and related artifacts. Malware stole CI/CD credentials (exfil as tpcp.tar.gz). Microsoft, Sysdig, CSA Singapore and Checkmarx published guidance in March 2026.
