GitLab (CVSS 10, unauthenticated RCE) and Argo CD (four criticals) both shipped maximum-severity fixes for their build and deploy control planes in one week. A flaw there is not one server, it is a trusted channel to everything it deploys. This week's Signal. https://suriq.io/blog/signal-pipeline-rce-blast-radius #CVE #SupplyChain #infosec #cybersecurity