DossierENTITY

CVSS 10

Coverage of CVSS 10 in the Nexus archive.

Earliest in view: Apr 30 · 07:07 UTCMost recent: Apr 30 · 07:07 UTC

Co-mentioned in this coverage

Googleorganization1 @google/gemini-clisoftware1 google-github-actions/run-gemini-clisoftware1 arbitrary code executiontopic1 npm packagetopic1 GitHub Actions workflowtopic1 security flawtopic1

Recent coverage

SECURITYApr 30 · 07:07 UTCTHE HACKER NEWS
Google Fixes CVSS 10 Gemini CLI CI RCE and Cursor Flaws Enable Code Execution
Google has patched a critical security vulnerability (CVSS 10) in the Gemini CLI npm package and GitHub Actions workflow, which could have enabled unprivileged attackers to execute arbitrary code on host systems by injecting malicious configuration content.

CVSS 10 · Dossier · The Nexus