Description
A vulnerability was detected in elenavanengelenmaslova mocknest-serverless 0.9.0. The affected element is an unknown function of the file deployment/aws/shared/github-oidc-role.yaml of the component AWS GitHub OIDC Deployment Helper Script. Performing a manipulation results in improper privilege management. It is possible to initiate the attack remotely. The patch is named 6ab3147282d867c1993f995272750db091c2290b. Applying a patch is the recommended action to fix this issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| elenavanengelenmaslova | mocknest-serverless | 0.9.0 | — |
References
- VDB-399670 | elenavanengelenmaslova mocknest-serverless AWS GitHub OIDC Deployment Helper Script github-oidc-role.yaml privileges management vdb-entry
- VDB-399670 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- CVE-2026-86516 | CVE Analysis and Report third-party-advisory
- Submit #908568 | elenavanengelenmaslova mocknest-serverless 0.9.0 Improper Privilege Management third-party-advisory
- https://github.com/elenavanengelenmaslova/mocknest-serverless/commit/6ab3147282d867c1993f995272750db091c2290b patch
- https://github.com/elenavanengelenmaslova/mocknest-serverless/pull/254 issue-tracking patch
- https://github.com/elenavanengelenmaslova/mocknest-serverless/ product