MEDIUM4.3PyPI
GHSA-7ww3-xvf5-cxwmciguard: Web UI is missing HTTP defence-in-depth headers
Modified: 5/5/2026
package
pkg:pypi/ciguard
ciguard: Web UI is missing HTTP defence-in-depth headers
Modified: 5/5/2026
ciguard: discover_pipeline_files follows symlinks out of scan root
Modified: 7/13/2026
ciguard: Container image runs as root (no USER directive)
Modified: 7/13/2026
ciguard: SCA HTTP client reads response body without size cap
Modified: 7/13/2026
ciguard: discover_pipeline_files follows symlinks out of scan root
Modified: 7/13/2026
ciguard: Container image runs as root (no USER directive)
Modified: 7/13/2026
ciguard: SCA HTTP client reads response body without size cap
Modified: 7/13/2026