Description (CNA)
A vulnerability was detected in elenavanengelenmaslova mocknest-serverless 0.9.0. The affected element is an unknown function of the file deployment/aws/shared/github-oidc-role.yaml of the component AWS GitHub OIDC Deployment Helper Script. Performing a manipulation results in improper privilege management. It is possible to initiate the attack remotely. The patch is named 6ab3147282d867c1993f995272750db091c2290b. Applying a patch is the recommended action to fix this issue.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| elenavanengelenmaslova / mocknest-serverless | affected 0.9.0 |
CWE
CWE-269, CWE-266
References
- https://vuldb.com/vuln/399670
- https://vuldb.com/vuln/399670/cti
- https://vuldb.com/cve/CVE-2026-86516
- https://vuldb.com/submit/908568
- https://github.com/elenavanengelenmaslova/mocknest-serverless/commit/6ab3147282d867c1993f995272750db091c2290b
- https://github.com/elenavanengelenmaslova/mocknest-serverless/pull/254
- https://github.com/elenavanengelenmaslova/mocknest-serverless/
ADP enrichment
No English description supplied.
No references supplied.