Developer Tools & Supply Chain
AWS SAM CLI 1.166.2 Fixes Terraform Hook Command Injection
AWS SAM CLI 1.166.2 fixes Terraform hook command injection. Upgrade build hosts, audit untrusted inputs and forks, validate pipelines, and retain evidence.
Oracle Java Security Alert Distrusts Compromised eMudhra Intermediates
Oracle's Java alert distrusts compromised eMudhra intermediates. Inventory listed runtimes, patch or mitigate, validate trust, and retain evidence.
GitLab Critical Patch Release Fixes CVSS 10 Server RCE
GitLab fixes a CVSS 10 server RCE and 11 other flaws. Upgrade supported branches, review detections and migrations, validate, and retain evidence.
AWS Serverless CI/CD Sample 1.0.11 Fixes Privilege Assignment Flaw
AWS fixed a privilege flaw in its serverless CI/CD sample 1.0.11. Inventory derived deployments, restrict push access, update, and retain evidence.
hex_core 0.20.0 Restores TLS Certificate Validation
hex_core 0.20.0 fixes TLS certificate validation on older Erlang/OTP paths. Confirm adapter and CA-store scope, update or mitigate, and retain evidence.
ash_typescript 0.19.1 Redacts Internal RPC Error Details
ash_typescript 0.19.1 redacts internal terms from RPC errors. Confirm exposed actions, update affected applications, test errors, and retain evidence.
CISA Confirms Exploitation of GitLab CI/CD RCE
CISA confirms exploitation of GitLab CI/CD RCE CVE-2026-97229. Prioritize exposed self-managed instances, update, perform triage, and retain evidence.
AWS CDK 2.267.0 Restricts Symlinks in Docker Asset Bundling
Amazon Web Services issued 2026-131-AWS. Match affected deployments, apply supported fixes, validate operations, and retain evidence.
AWS Toolkit for VS Code 4.10.0 Secures Cached CodeCatalyst Tokens
Amazon Web Services issued 2026-129-AWS. Match affected deployments, apply supported fixes, validate operations, and retain evidence.
HashiCorp go-getter Updates Block S3 and GCS Path Traversal
HashiCorp published HCSEC-2026-44 security fixes. Inventory scope, apply supported updates, validate operations, and retain evidence.