The vulnerability of the GitHub.repo() function in the GitHub library for Julia, GitHub.jl, allows a hacker to gain access to any other endpoints.

The vulnerability of the GitHub.repo function in the Julia package GitHub.jl is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to gain access to any other endpoints...

PT-2025-46021

There is a lack of input validation for user-provided values in certain functions. In the GitHub.repo function, the user can provide any string for the repo name field. These inputs are not validated or safely encoded and are sent directly to the server. Impact This means a user can add path...

CVE-2025-52569

CVE-2025-52569 concerns GitForge.jl/GitHub.jl prior to 5.9.1. The issue is lack of input validation in the GitHub.repo() function: the repo_name field accepts any string and is sent to the server without proper encoding, enabling path traversal patterns such as ../ to access unintended GitHub API...