Microsoft GitHub Copilot for JetBrains Command Injection Vulnerability

Microsoft GitHub Copilot for JetBrains is an AI programming assistant plugin from Microsoft USA that can be installed in various IDEs produced by JetBrains. A command injection vulnerability exists in Microsoft GitHub Copilot for JetBrains. The vulnerability stems from the application failing to...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion in the FunctionPushPop. An attacker can cause excessive resource consumption and application instability by triggering deep or infinite recursion through crafted input to the affected process. Remediation There is...

GHSA-V52C-386H-88MC

creationtimestamp| type| source ---|---|--- 2026-03-01 08:10:22+00:00| seen| https://gist.github.com/alon710/8ab283edb74cdc48bd86d05f78d0166b...

GHSA-XF7R-HGR6-V32P

creationtimestamp| type| source ---|---|--- 2026-03-01 07:40:22+00:00| seen| https://gist.github.com/alon710/4e7c76effa1548ba67f0464733eb7344...

GHSA-XFX2-PRG5-JQ3G

creationtimestamp| type| source ---|---|--- 2026-03-01 07:10:22+00:00| seen| https://gist.github.com/alon710/748a43a550acf66c2103297189dfb986 2026-03-01 07:30:03+00:00| seen| https://bsky.app/profile/flarestart.bsky.social/post/3mfy7s5omvb24...

CVE-2026-28415

creationtimestamp| type| source ---|---|--- 2026-03-01 04:10:22+00:00| seen| https://gist.github.com/alon710/794157ac4402be5b97d405f38441e2cb 2026-03-01 04:25:33+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mfxvi7zur4c2 2026-03-01...

GHSA-H3H8-3V2V-RG7M

creationtimestamp| type| source ---|---|--- 2026-03-01 01:10:21+00:00| seen| https://gist.github.com/alon710/b9cbc8bb91819a5e8479c60ca815f5c4...

GHSA-RFJG-6M84-CRJ2

creationtimestamp| type| source ---|---|--- 2026-02-28 09:10:10+00:00| seen| https://gist.github.com/alon710/e6e1d06f45ead4fd6adc1a03157a349c...

GHSA-FPG4-JHQR-589C

creationtimestamp| type| source ---|---|--- 2026-02-28 08:10:11+00:00| seen| https://gist.github.com/alon710/c9a9aad02e1c4d2d715228e3279389cd...

GHSA-945P-3JHM-6RCP

creationtimestamp| type| source ---|---|--- 2026-02-28 03:40:10+00:00| seen| https://gist.github.com/alon710/43a4ce973e7deb9cb22c759bda6c4252...

GHSA-5C6J-R48X-RMVQ

creationtimestamp| type| source ---|---|--- 2026-02-28 03:10:11+00:00| seen| https://gist.github.com/alon710/d1eb861b7784463c434753842ee96c85 2026-04-03 15:44:39+00:00| seen| https://gist.github.com/kbellioum/2aaedb76430c4e5fc2f81d1185d752b6 2026-04-21 11:56:50+00:00| seen|...

Exploit for CVE-2024-9999

ExploitRank - Exploit Intelligence Engine EIE v1.0.0 !Pyt...

GHSA-7777-FHQ9-592V

creationtimestamp| type| source ---|---|--- 2026-02-28 00:40:10+00:00| seen| https://gist.github.com/alon710/cc79fb84eb7e27eda5e00b377415b26c...

GHSA-QVMX-RQMX-PVFG vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2002-1614

creationtimestamp| type| source ---|---|--- 2026-02-27 07:25:02+00:00| seen| https://gist.github.com/ghh-jb/61f35d015c4e180bbddcf324be113e26...

GHSA-42CR-W2GR-M54Q

creationtimestamp| type| source ---|---|--- 2026-02-27 06:10:18+00:00| seen| https://gist.github.com/alon710/87a9eaadd5362fd30512683dd9901643...

CVE-2026-27938

WPGraphQL provides a GraphQL API for WordPress sites. Prior to version 2.9.1, the wp-graphql/wp-graphql repository contains a GitHub Actions workflow release.yml vulnerable to OS command injection through direct use of $ github.event.pullrequest.body inside a run: shell block. When a pull request...

GHSA-PHWV-C562-GVMH

creationtimestamp| type| source ---|---|--- 2026-02-27 04:10:19+00:00| seen| https://gist.github.com/alon710/bd389c3761f00f62851a6d5cd2e46410...

GO-2026-4563 Fleet: Unauthenticated Android device disenrollment vulnerability via Pub/Sub endpoint in github.com/fleetdm/fleet

Fleet: Unauthenticated Android device disenrollment vulnerability via Pub/Sub endpoint in github.com/fleetdm/fleet...

GO-2026-4558 Mailpit is Vulnerable to Server-Side Request Forgery (SSRF) via Link Check API in github.com/axllent/mailpit

Mailpit is Vulnerable to Server-Side Request Forgery SSRF via Link Check API in github.com/axllent/mailpit...