944 matches found
CVE-2025-58401
Obsidian GitHub Copilot Plugin versions prior to 1.1.7 store Github API token in cleartext form. As a result, an attacker may perform unauthorized operations on the linked Github account...
CVE-2025-58401
Obsidian GitHub Copilot Plugin versions prior to 1.1.7 store Github API token in cleartext form. As a result, an attacker may perform unauthorized operations on the linked Github account...
CVE-2025-58401
Obsidian GitHub Copilot Plugin versions prior to 1.1.7 store Github API token in cleartext form. As a result, an attacker may perform unauthorized operations on the linked Github account...
Obsidian GitHub Copilot Plugin 安全漏洞
Obsidian GitHub Copilot Plugin is a Github Copilot plugin by the individual developer Pierre-Adrien Vasseur. A security vulnerability exists in versions of Obsidian GitHub Copilot Plugin prior to 1.1.7, which stems from storing Github API tokens in clear-text form, which could lead to unauthorize...
PT-2025-36109
Name of the Vulnerable Software and Affected Versions: Obsidian GitHub Copilot Plugin versions prior to 1.1.7 Description: The Obsidian GitHub Copilot Plugin stores Github API tokens in cleartext form. This allows an attacker to perform unauthorized operations on the linked Github account...
CVE-2025-55242 Xbox Certification Bug Copilot Djando Information Disclosure Vulnerability
...
CVE-2025-55242 Xbox Certification Bug Copilot Djando Information Disclosure Vulnerability
...
CVE-2025-55242
CVE-2025-55242 affects Xbox Gaming Services/Xbox (Xbox Certification Bug Copilot Djando Information Disclosure Vulnerability). Description: exposure of sensitive information to an unauthorized actor over a network. Affected component is related to Xbox Gaming Services; root cause described as an ...
Adversarial Bug Reports As a Security Risk in Language Model-Based Automated Program Repair
Large Language Model LLM - based Automated Program Repair APR systems are increasingly integrated into modern software development workflows, offering automated patches in response to natural language bug reports. However, this reliance on untrusted user input introduces a novel and underexplored...
Malicious code in @xd37hxassent/copilot-poc-jira (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Securing and governing the rise of autonomous agents
In this blog, you will hear directly from Corporate Vice President and Deputy Chief Information Security Officer CISO for Identity, Igor Sakhnov, about how to secure and govern autonomous agents. This blog is part of a new ongoing series where our Deputy CISOs share their thoughts on what is most...
Securing and governing the rise of autonomous agents
In this blog, you will hear directly from Corporate Vice President and Deputy Chief Information Security Officer CISO for Identity, Igor Sakhnov, about how to secure and govern autonomous agents. This blog is part of a new ongoing series where our Deputy CISOs share their thoughts on what is most...
Safeguarding VS Code against prompt injections
The Copilot Chat extension for VS Code has been evolving rapidly over the past few months, adding a wide range of new features. Its new agent mode lets you use multiple large language models LLMs, built-in tools, and MCP servers to write code, make commit requests, and integrate with external...
Malicious code in global-copilot-menu (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41387 Malicious code in global-copilot-menu (npm)
The package communicates with a domain associated with malicious activity...
CVE-2025-53773
Improper neutralization of special elements used in a command 'command injection' in GitHub Copilot and Visual Studio allows an unauthorized attacker to execute code locally...
@proompter/demo-next (>=0.0.16, <=0.0.19), @proompter/flowise (>=1.4.13, <=1.4.14) +2 more potentially affected by CVE-2025-8943 via flowise-components (>=1.3.4, <=3.1.4)
flowise-components NPM version =1.3.4, =0.0.16, =1.4.13, =0.0.1, =1.0.0, =3.1.4 Source cves: CVE-2025-8943 Source advisory: SNYK:JS-FLOWISECOMPONENTS-11953677...
Microsoft GitHub Copilot Remote Code Execution Vulnerability
GitHub Copilot is an AI-driven code assistant developed by Microsoft, widely used in Visual Studio Code, Visual Studio and other development environments, providing intelligent code completion and generation services for millions of developers worldwide. Microsoft GitHub Copilot remote code...
