What It Took to Reach 1 Billion Build Manifests
More on Manifests
Other advisories
- MediumCVE-2026-85747Distribution: Client `manifests.Get()` does not verify returned content against requested digest
- MediumCVE-2026-85747Distribution: Client `manifests.Get()` does not verify returned content against requested digest
- MediumCVE-2026-85747Distribution: Client `manifests.Get()` does not verify returned content against requested digest
- Not ratedosv:CVE-2026-85747Distribution: Client `manifests.Get()` does not verify returned content against requested digest
- LowCVE-2026-105795Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifests
- LowCVE-2026-105795Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifests
- Not ratedosv:CVE-2026-105795Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifests
- Not ratedosv:CVE-2026-105641Plane: Hardcoded SECRET_KEY and LIVE_SERVER_SECRET_KEY shipped in aio/cli community deployment manifests — session forgery and live-server auth bypass
Source: https://thehackernews.com/2026/09/what-it-took-to-reach-1-billion-build.html
ID