https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 10:11:01 +0000 https://vulnerability.circl.lu/vuln/cve-2026-52833 <p><strong>Affected:</strong> nuclio</p> <p>Nuclio is a &#34;Serverless&#34; framework for Real-Time Events and Data Processing. Prior to version 1.16.5, Nuclio&#39;s Java runtime generates a build.gradle file during function builds using Go&#39;s text/template package. The template renders runtimeAttributes.repositories[] values with the {{ . }} action, which performs no escaping. An attacker can embed a closing brace (}) to break out of the repositories {} block and append arbitrary Groovy statements that execute unconditionally during the Gradle configuration phase. This issue has been patched in version 1.16.5.</p> <p><strong>Affected:</strong> nuclio</p> <p>Nuclio is a &#34;Serverless&#34; framework for Real-Time Events and Data Processing. Prior to version 1.16.5, Nuclio&#39;s Java runtime generates a build.gradle file during function builds using Go&#39;s text/template package. The template renders runtimeAttributes.repositories[] values with the {{ . }} action, which performs no escaping. An attacker can embed a closing brace (}) to break out of the repositories {} block and append arbitrary Groovy statements that execute unconditionally during the Gradle configuration phase. This issue has been patched in version 1.16.5.</p> https://vulnerability.circl.lu/vuln/cve-2026-52833