<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://www.devopsness.com/blog/brotli-cve-2026-111497-broccoli2shell-node-envoy-istio</loc>
    <news:news>
      <news:publication>
        <news:name>DevOpsNess</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-08T00:00:00.000Z</news:publication_date>
      <news:title>CVE-2026-111497 &quot;Broccoli2Shell&quot;: One Brotli Bug in Node.js, Envoy and Istio. Patch Node First</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.devopsness.com/blog/argo-cd-cve-2026-113708-repo-server-rce</loc>
    <news:news>
      <news:publication>
        <news:name>DevOpsNess</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-08T00:00:00.000Z</news:publication_date>
      <news:title>Argo CD CVE-2026-113708: Read-Only Users Can Run Code on the Repo-Server. Upgrade to 3.4.10+</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://www.devopsness.com/blog/github-actions-gheist-stolen-tokens-ci-sync-secrets</loc>
    <news:news>
      <news:publication>
        <news:name>DevOpsNess</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-08T00:00:00.000Z</news:publication_date>
      <news:title>Gheist: Stolen GitHub Tokens Are Dumping Actions Secrets Past Log Masking. Hunt for ci-sync Branches</news:title>
    </news:news>
  </url>
</urlset>
