TI-2026-02651 CVE-2026-3067 · GHSA-p86v-p9g7-fffw
HummerRisk Archive Extraction CommandUtils.java extractZip path traversal
Priority MEDIUM 57
A vulnerability has been found in HummerRisk up to 1.5.0.
Vulnerabilities
6 records
TI-2026-02650 CVE-2026-3066 · GHSA-rx2f-c6vf-gmg2
HummerRisk Cloud Compliance Scanning PlatformUtils.java fixedCommand command injection
Priority MEDIUM 57
A flaw has been found in HummerRisk up to 1.5.0.
TI-2026-02649 CVE-2026-3065 · GHSA-vq86-4hgw-x482
HummerRisk Cloud Task Dry-run CloudTaskService.java CommandUtils.commonExecCmdWithResult command injection
Priority MEDIUM 57
A vulnerability was detected in HummerRisk up to 1.5.0.
TI-2026-02648 CVE-2026-3064 · GHSA-38jp-gj76-pm7x
HummerRisk Cloud Task Scheduler ResourceCreateService.java command injection
Priority MEDIUM 57
A security vulnerability has been detected in HummerRisk up to 1.5.0.
TI-2025-39440 CVE-2025-63721 · GHSA-9hqp-6jv3-9h7w
HummerRisk thru v1.5.0 is using a vulnerable Snakeyaml component, allowing attackers with…
Priority HIGH 82
HummerRisk thru v1.5.0 is using a vulnerable Snakeyaml component, allowing attackers with normal user privileges to hit the /rule/add API and thereby achieve RCE and take over the server.
TI-2023-23227 CVE-2023-43449 · GHSA-cpvv-5cvm-737x
An issue in HummerRisk HummerRisk v.1.10 thru 1.4.1 allows an authenticated attacker to…
Priority HIGH 73
An issue in HummerRisk HummerRisk v.1.10 thru 1.4.1 allows an authenticated attacker to execute arbitrary code via a crafted request to the service/LicenseService component.