jira news
2 stories
snowflakehigh
Snowflake GitHub Actions Flaw Allows Command Injection
A recently disclosed vulnerability in Snowflake's GitHub Actions workflows could allow for command injection, according to researchers. The flaw, identified within the snowflakedb/snowflake-connector-net repository, reportedly enables the execution of arbitrary commands within a workflow through the submission of a specially crafted GitHub issue.
atlassianhigh
Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers
Reports indicate that Atlassian's Rovo assistant has been found to contain vulnerabilities that could be exploited to exfiltrate sensitive data from Jira and Confluence instances. Two separate security firms have identified distinct mechanisms by which an attacker might trick Rovo into disclosing information. These findings highlight potential security risks associated with AI-powered…