cve-2026-105221-gist-tls

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · cve-2026-105221-gist-tls Write-up: https://abraxaslabs.tech/research/cve-2026-105221-gist-tls cve-2026-105221-gist-tls gist RubyGem 6.1.0 - defunkt Class: TLS verify bypass credential theft Reach: Remote on-path...

CVE-2026-45793

Composer is a dependency Manager for the PHP language. Prior to 1.10.28, 2.2.28, and 2.9.8, Composer\IO\BaseIO::loadConfiguration validates GitHub OAuth tokens with the regex ^.A-Za-z0-9+$ and interpolates rejected tokens into an UnexpectedValueException; GitHub Actions GITHUBTOKEN values using t...

EUVD-2026-42758

The LoginPress Pro plugin for WordPress is vulnerable to Authentication Bypass via the GitHub OAuth callback in versions up to, and including, 6.2.3. The vulnerability exists in the loginpressongithublogin function, which blindly trusts the first element profile0'email' of the array returned by...

CVE-2026-12597

The LoginPress Pro plugin for WordPress is vulnerable to Authentication Bypass via the GitHub OAuth callback in versions up to, and including, 6.2.3. The vulnerability exists in the loginpressongithublogin function, which blindly trusts the first element profile0'email' of the array returned by...

CVE-2026-12597: Improper Authentication

The LoginPress Pro plugin for WordPress is vulnerable to Authentication Bypass via the GitHub OAuth callback in versions up to, and including, 6.2.3. The vulnerability exists in the loginpressongithublogin function, which blindly trusts the first element profile0'email' of the array returned by...

CVE-2026-12597 LoginPress Pro <= 6.2.3 - Unauthenticated Authentication Bypass via Unverified OAuth Email via GitHub OAuth Callback

The LoginPress Pro plugin for WordPress is vulnerable to Authentication Bypass via the GitHub OAuth callback in versions up to, and including, 6.2.3. The vulnerability exists in the loginpressongithublogin function, which blindly trusts the first element profile0'email' of the array returned by...

CVE-2026-12597 LoginPress Pro <= 6.2.3 - Unauthenticated Authentication Bypass via Unverified OAuth Email via GitHub OAuth Callback

The LoginPress Pro plugin for WordPress is vulnerable to Authentication Bypass via the GitHub OAuth callback in versions up to, and including, 6.2.3. The vulnerability exists in the loginpressongithublogin function, which blindly trusts the first element profile0'email' of the array returned by...

CVE-2026-12597

Summary (CVE-2026-12597) : The LoginPress Pro WordPress plugin (versions up to and including 6.2.3) contains an authentication bypass via the GitHub OAuth callback. The flaw resides in the loginpress_on_github_login() function, which blindly trusts the first element (profile[0]['email']) from Git...

PT-2026-57017

The LoginPress Pro plugin for WordPress is vulnerable to Authentication Bypass via the GitHub OAuth callback in versions up to, and including, 6.2.3. The vulnerability exists in the loginpress on github login function, which blindly trusts the first element profile0'email' of the array returned b...

GO-2026-5118 zrok: Reflected XSS in GitHub OAuth callback via unsanitized refreshInterval error rendering in github.com/openziti/zrok

zrok: Reflected XSS in GitHub OAuth callback via unsanitized refreshInterval error rendering in github.com/openziti/zrok...

io.fabric8.jenkins.plugins:openshift-sync (>=y, <=1.0.45), org.jenkins-ci.plugins:git (3.0.0) +3 more potentially affected by CVE-2026-57282 via org.jenkins-ci.plugins:git-client (2.0.0)

org.jenkins-ci.plugins:git-client MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - io.fabric8.jenkins.plugins:openshift-sync =y, =0.25, =0.5, =0.6 Source cves: CVE-2026-57282...

org.jenkins-ci.plugins:coding-webhook (>=1.3.0-alpha.1, <=1.4.3), org.jenkins-ci.plugins:github-oauth (>=0.26, <=0.33) +1 more potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1.9)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:coding-webhook =1.3.0-alpha.1, =0.26, =0.33 -...

org.jenkins-ci.plugins:github-oauth (611.v70d151e60ec4) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1793.v1831e9c68d77)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1793.v1831e9c68d77 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-oauth 611.v70d151e60ec4 Source...

org.jenkins-ci.plugins:github-oauth (621.v33b_4394dda_4d) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1797.v86fdb_4d57d43)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1797.v86fdb4d57d43 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-oauth 621.v33b4394dda4d Source...

org.jenkins-ci.plugins:github-oauth (>=647.v44f5236c308d, <=651.v135e939e8b_60) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1810.v913311241fa_9)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1810.v913311241fa9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - org.jenkins-ci.plugins:github-oauth =647.v44f5236c308d,...

io.jenkins.plugins:mergify (>=1.83.v5b_ff0e55cd2d, <=1.95.v8b_31e80441fb), org.jenkins-ci.plugins:github-oauth (>=683.v04a_a_b_e9d7e07, <=685.v53b_070455063) potentially affected by CVE-2026-57285 via org.jenkins-ci.plugins:github-branch-source (1824.v046257273408)

org.jenkins-ci.plugins:github-branch-source MAVEN version 1824.v046257273408 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:github-branch-source and may be impacted: - io.jenkins.plugins:mergify =1.83.v5bff0e55cd2d,...

org.jenkins-ci.main:jenkins-test-harness (1.586), org.jenkins-ci.main:jenkins-war (1.586) +5 more potentially affected by CVE-2026-53436 via org.jenkins-ci.main:jenkins-core (1.586)

org.jenkins-ci.main:jenkins-core MAVEN version 1.586 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.586 - org.jenkins-ci.main:jenkins-war 1.586 -...

org.jenkins-ci.main:jenkins-test-harness (1.586), org.jenkins-ci.main:jenkins-war (1.586) +5 more potentially affected by CVE-2026-53437 via org.jenkins-ci.main:jenkins-core (1.586)

org.jenkins-ci.main:jenkins-core MAVEN version 1.586 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.586 - org.jenkins-ci.main:jenkins-war 1.586 -...

org.jenkins-ci.main:jenkins-test-harness (1.586), org.jenkins-ci.main:jenkins-war (1.586) +5 more potentially affected by CVE-2026-53440 via org.jenkins-ci.main:jenkins-core (1.586)

org.jenkins-ci.main:jenkins-core MAVEN version 1.586 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.586 - org.jenkins-ci.main:jenkins-war 1.586 -...

org.jenkins-ci.main:jenkins-test-harness (1.586), org.jenkins-ci.main:jenkins-war (1.586) +5 more potentially affected by CVE-2026-53435 via org.jenkins-ci.main:jenkins-core (1.586)

org.jenkins-ci.main:jenkins-core MAVEN version 1.586 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.586 - org.jenkins-ci.main:jenkins-war 1.586 -...