🚨 GitHub 监控消息提醒

🚨 发现关键词: #CVE-2026 #POC

📦 项目名称: CVE-2026-107360
👤 项目作者: googlesky
🛠 开发语言: Ruby
⭐ Star数量: 0 | 🍴 Fork数量: 0
📅 更新时间: 2026-11-13 03:25:05

📝 项目描述:
rubygem-safemode evaluates compound assignments in sandboxed Foreman/Satellite templates without Jail allow-list mediation: a template author invokes arbitrary no-arg methods on template objects (host deletion) and reads non-allow-listed state. Differential lab: 2.0.3 executes the bypass, PR #75 blocks it; 31-form sweep, evidence included.

🔗 点击访问项目地址 GitHub - googlesky/CVE-2026-107360: rubygem-safemode evaluates compound assignments in sandboxed Foreman/Satellite templates without…
 
 
Back to Top