34884 matches found
PT-2026-86984
Name of the Vulnerable Software and Affected Versions elenavanengelenmaslova mocknest-serverless version 0.9.0 Description An issue exists in the AWS GitHub OIDC Deployment Helper Script within the file deployment/aws/shared/github-oidc-role.yaml. A remote manipulation of an unknown function in...
CVE-2026-86492
In JetBrains YouTrack before 2026.2.18634 a shared token cache allowed cross-tenant theft of GitHub App installation tokens...
CVE-2026-86492
In JetBrains YouTrack before 2026.2.18634 a shared token cache allowed cross-tenant theft of GitHub App installation tokens...
CVE-2026-86492
JetBrains YouTrack versions before 2026.2.18634 are affected by a vulnerability in a shared token cache that permits cross-tenant theft of GitHub App installation tokens . An attacker with low privileges over the network (no user interaction required) can steal tokens belonging to other tenants, ...
CVE-2026-86492
In JetBrains YouTrack before 2026.2.18634 a shared token cache allowed cross-tenant theft of GitHub App installation tokens...
EUVD-2026-72508
In JetBrains YouTrack before 2026.2.18634 a shared token cache allowed cross-tenant theft of GitHub App installation tokens...
Malicious Package
Overview github-app-sts-action is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
PT-2026-86651
Interesting GitHub Security Lab disclosure: same-second TOCTOU in jupyterlab/maintainer-tools update-snapshots-checkout CVE-2026-84973. Race between checkout and snapshot update. Window is measured in the same second the workflow runs. Classic TOCTOU, but in a maintainer tooling path that many...
PT-2026-86864
In JetBrains YouTrack before 2026.2.18634 a shared token cache allowed cross-tenant theft of GitHub App installation tokens...
CVE-2026-86492: Exposure of Data Element to Wrong Session
In JetBrains YouTrack before 2026.2.18634 a shared token cache allowed cross-tenant theft of GitHub App installation tokens...
CVE-2010-5139
creationtimestamp| type| source ---|---|--- 2026-09-06 23:55:15+00:00| seen| https://gist.github.com/1440000bytes/211ac92dd4433bb1a2e674bf0ff7db2e 2026-09-07 00:00:43+00:00| seen| https://gist.github.com/1440000bytes/211ac92dd4433bb1a2e674bf0ff7db2e 2026-09-08 09:00:50+00:00| seen|...
CVE-2026-82751
creationtimestamp| type| source ---|---|--- 2026-09-06 17:35:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/idlfnokbigimu 2026-09-06 20:01:32+00:00| seen| https://gist.github.com/ichintu/a881adf8939998cb9caa6fc0349d18b6...
CVE-2026-86196
creationtimestamp| type| source ---|---|--- 2026-09-05 20:01:40+00:00| seen| https://gist.github.com/ichintu/4d7dd4674813d417824a1017200d1117...
PYSEC-2026-3721
creationtimestamp| type| source ---|---|--- 2026-09-05 17:06:04+00:00| seen| https://gist.github.com/konard/19347b7afef1e0d007ef83355a1dc3e5 2026-09-21 10:13:29+00:00| seen| https://gist.github.com/konard/ed0a4a3ae649badd8b7c3792537c0cda 2026-10-05 15:09:48+00:00| seen|...
CVE-2026-73088
creationtimestamp| type| source ---|---|--- 2026-09-05 16:13:11+00:00| seen| https://gist.github.com/djlan/e3b6762435f262eb64ea25ec3f8c9d82 2026-09-05 16:19:59+00:00| seen| https://gist.github.com/djlan/cceed0d99bfb6e25cf9c9ac2042ad728 2026-09-09 00:19:56+00:00| seen|...
GHSA-6V2G-FPXH-PMMH
creationtimestamp| type| source ---|---|--- 2026-09-05 14:31:44+00:00| seen| https://gist.github.com/alon710/e9c9321eb429f1e237680df95cb576b8...
GHSA-C6MW-8XH8-GPQ6
creationtimestamp| type| source ---|---|--- 2026-09-05 13:31:53+00:00| seen| https://gist.github.com/alon710/25de86a6a1fbd873e6db813795a47505...
GHSA-73J8-2GCH-69RQ
creationtimestamp| type| source ---|---|--- 2026-09-05 13:03:30+00:00| seen| https://gist.github.com/konard/512a90a3806a1c7a5364f6d1e4474f78 2026-09-05 16:47:42+00:00| seen| https://gist.github.com/konard/1f348647ebe071c63cce754dc60e1085 2026-09-05 17:05:59+00:00| seen|...