zuke-build

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

zuke-build records in CISA KEV

No zuke-build vulnerabilities are listed in CISA KEV.

Records

5 records

TI-2026-83202 CVE-2026-119290

Zuke writes resolved secrets in cleartext to GitHub step summaries

LOW 39

Zuke is a code-first, strongly typed build automation system for Deno.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00455 Published 2026-10-30 Fixed in 1.51.0 CWE-532

TI-2026-83198 CVE-2026-119287

Zuke: Command-form registry descriptors bypass the MCP launch policy

LOW 36

Zuke is a code-first, strongly typed build automation system for Deno.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00223 Published 2026-10-30 Fixed in 1.51.0 CWE-862

TI-2026-83199 CVE-2026-119288

Argument injection in Zuke on Windows via cmd.exe batch shims

LOW 32

Zuke is a code-first, strongly typed build automation system for Deno.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.00186 Published 2026-10-30 Fixed in 1.51.0 CWE-78

TI-2026-83201 CVE-2026-119289

Spoofable workflow run matching in Zuke githubWorkflow gate

LOW 30

Zuke is a code-first, strongly typed build automation system for Deno.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00176 Published 2026-10-30 Fixed in 1.10.0 CWE-345

TI-2026-83203 CVE-2026-119291

Symlink following in zuke setup and import allows outside writes

LOW 24

Zuke is a code-first, strongly typed build automation system for Deno.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00145 Published 2026-10-30 Fixed in 1.4.0 CWE-59

Open these records in search →