CVE-2026-41010 - BOSH Director: OS Command Injection
CVE ID :CVE-2026-41010 Published : June 4, 2026, 4:17 a.m. | 57 minutes ago Description :ReleaseJob#unpack builds job_dir = File.join(@release_dir, 'jobs', name) and job_tgz = File.join(@release_dir, 'jobs', "#{name}.tgz") where name returns @job_meta['name'], a value taken verbatim from the...