MEDIUM4.3PyPI
GHSA-7ww3-xvf5-cxwmciguard: Web UI is missing HTTP defence-in-depth headers
Modified: 5/5/2026
package
PyPI/ciguard
pkg:pypi/ciguard
—0.0PyPI
GHSA-8cxw-cc62-q28v· CVE-2026-44220, PYSEC-2026-2408ciguard: discover_pipeline_files follows symlinks out of scan root
Modified: 7/13/2026
LOW3.0PyPI
GHSA-jrm4-4pcf-4763· CVE-2026-44218, PYSEC-2026-2409ciguard: Container image runs as root (no USER directive)
Modified: 7/13/2026
LOW3.7PyPI
GHSA-xw8c-rrvx-f7xq· CVE-2026-44219, PYSEC-2026-2410ciguard: SCA HTTP client reads response body without size cap
Modified: 7/13/2026
—0.0PyPI
PYSEC-2026-2408· CVE-2026-44220, GHSA-8cxw-cc62-q28vciguard: discover_pipeline_files follows symlinks out of scan root
Modified: 7/13/2026
LOW3.0PyPI
PYSEC-2026-2409· CVE-2026-44218, GHSA-jrm4-4pcf-4763ciguard: Container image runs as root (no USER directive)
Modified: 7/13/2026
LOW3.7PyPI
PYSEC-2026-2410· CVE-2026-44219, GHSA-xw8c-rrvx-f7xqciguard: SCA HTTP client reads response body without size cap
Modified: 7/13/2026