openrundev CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM openrundev CVE published 2026-10-01

CVE-2026-55252

OpenRun, a self-hosted GitOps platform, has a vulnerability in versions prior to 0.17.7 that allows attackers to bypass redirect URL restrictions using //host paths, leading to open redirect attacks. This issue has been patched in version 0.17.7. The vulnerability is caused by insufficient validation of redirect URLs, which can be exploited by attackers to redirect users to malicious sites. Defenders shou [truncated]