Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

TI-2026-17522 CVE-2026-21764 · GHSA-35w6-wm82-6c6f

Insufficient Input Validation in DevOps Loop

Priority LOW 19

HCL DevOps Loop is affected by insufficient input validation that allows special characters where they should be restricted.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00222 Published 2026-07-17 No fix listed CWE-754
TI-2026-17521 CVE-2026-21762 · GHSA-hg49-v9p7-xwqr

Missing HTTP Security Headers in DevOps Loop

Priority LOW 24

HCL DevOps Loop is affected by missing HTTP security headers.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00288 Published 2026-07-17 No fix listed CWE-644
TI-2026-17520 CVE-2026-21761 · GHSA-mvhg-pqfh-v42v

CORS Misconfiguration in DevOps Loop

Priority LOW 24

HCL DevOps Loop is affected by a Cross-Origin Resource Sharing (CORS) misconfiguration.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00201 Published 2026-07-17 No fix listed CWE-942