agentprime: step-security-harden-runnerEvery new CVE for step-security-harden-runner.https://agentprime.io/CVE-2026-32947: Egress Policy Bypass via DNS over HTTPS (DoH) in Harden-Runner (Community Tier)https://agentprime.io/advisories/CVE-2026-32947/https://agentprime.io/advisories/CVE-2026-32947/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 Mar 2026 04:03:03 GMTCVECVE-2026-32946: Egress Policy Bypass via DNS over TCP in Harden-Runner (Community Tier)https://agentprime.io/advisories/CVE-2026-32946/https://agentprime.io/advisories/CVE-2026-32946/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 Mar 2026 03:58:40 GMTCVECVE-2026-25598: Bypassing Logging of Outbound Connections Using sendto, sendmsg, and sendmmsg in Harden-Runner (Community Tier)https://agentprime.io/advisories/CVE-2026-25598/https://agentprime.io/advisories/CVE-2026-25598/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Feb 2026 18:58:57 GMTCVECVE-2025-32955: Harden-Runner Evasion of 'disable-sudo' policyhttps://agentprime.io/advisories/CVE-2025-32955/https://agentprime.io/advisories/CVE-2025-32955/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Apr 2025 20:45:58 GMTCVECVE-2024-52587: Harden-Runner has command injection weaknesses in `setup.ts` and `arc-runner.ts`https://agentprime.io/advisories/CVE-2024-52587/https://agentprime.io/advisories/CVE-2024-52587/CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 18 Nov 2024 22:03:15 GMTCVE