March 12 CVE digest brings two CVSS 10 flaws in Himmelblau and Jellyfin CI/CD
by Artem Safonov
Two CVSS 10.0 flaws top the March 12 CVE digest, with Himmelblau's Azure Entra ID bypass letting attackers authenticate to any tenant and a Jellyfin GitHub Actions flaw enabling full repo takeover. 644 new CVEs in one day.
Read more →