BOSH Director vulnerabilities

1 known vulnerability in BOSH Director from Cloud Foundry Foundation. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  BOSH Director: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-41010Jun 4, 2026Cloud Foundry Foundation

  ReleaseJob#unpack builds job_dir = File.join(@release_dir, 'jobs', name) and job_tgz = File.join(@release_dir, 'jobs', "#{name}.tgz") where name returns @job_meta['name'], a value taken verbatim from the jobs: array of the attacker-supplied release.MF inside t