Stepsecurity - vulnerabilities (CVEs)

3 CVEs in 1 products, 0 in the last 30 days, newest from 2026-03-20.

Products

• Harden-runner - 3 CVEs

Newest CVEs of Stepsecurity

• CVE-2026-32947 - CVSS 4.9 (medium), 2026-03-20: Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. In versions 2.15.1 and below, a DNS over HTTPS (DoH) vulnerability…
• CVE-2026-32946 - CVSS 4.6 (medium), 2026-03-20: Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. In versions 2.15.1 and below, the Harden-Runner that allows bypass…
• CVE-2026-25598 - CVSS 6.3 (medium), 2026-02-09: Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. Prior to 2.14.2, a security vulnerability has been identified in…