blackduck-c-cpp vulnerabilities

2 known vulnerabilities in blackduck-c-cpp from Black Duck. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  blackduck-c-cpp: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-76055Aug 24, 2026Black Duck

  Improper Neutralization of Special Elements used in an OS Command in the package manager component of Black Duck blackduck-c-cpp before 3.0.7 allows an actor able to create a file within the scanned build directory to execute operating system commands as the a

• 7.1 High severity

  blackduck-c-cpp: Invocation of Process Using Visible Sensitive Information

  CVE-2026-76054Aug 24, 2026Black Duck

  Invocation of Process Using Visible Sensitive Information in Black Duck blackduck-c-cpp 1.0.17 through 3.0.6 allows an actor able to execute code within the scanned project's build to obtain the Black Duck API token via the ambient process environment, which i