Security
security-related advisories pertaining to nf-core software.
2026
Remote code execution and bot token theft via the pipeline template's PR-comment workflow
Category: Pipelines, Configuration
Remote code execution and bot token theft via the pipeline template's PR-comment workflow
Category: Pipelines, Configuration
A workflow in the pipeline template ran a value taken from a contributor’s pull request as a command, letting an outside attacker run code on nf-core’s CI and steal a shared bot token
2001
A faulty Answer to Life, the Universe, and Everything
Category: Pipelines, Modules, Subworkflows, Configuration
A faulty Answer to Life, the Universe, and Everything
Category: Pipelines, Modules, Subworkflows, Configuration
A critical mistake affecting the meaning of life calculations
Affects:
Nextflow:
42.0.0 42.1.0 42.2.0-nightly Executors: Local Dependencies: Singularity (3.8.1)