34888 matches found
EUVD-2026-67028
tiger-gh-mcp-server started its MCP HTTP transport without enabling the host allow-list the underlying SDK provides. src/httpServer.ts called the shared httpServerFactory helper and never set the DNS-rebinding-protection option, so the transport accepted a request whatever host it named, making t...
CVE-2025-45528
creationtimestamp| type| source ---|---|--- 2026-08-27 12:35:24+00:00| seen| https://gist.github.com/momenbasel/66e33613a52f6f59e49ee8ca6ea91a61...
CVE-2020-29184
creationtimestamp| type| source ---|---|--- 2026-08-27 12:19:26+00:00| seen| https://gist.github.com/momenbasel/b291d38d428104862f2cb1870dce321c...
Version Control DFIR: a Cheatsheet to GitHub, GitLab, Bitbucket, and Azure DevOps
A practitioner’s guide to log visibility, incident readiness, and threat hunting across the major version control services...
GHSA-VMM3-XGCX-67HM
creationtimestamp| type| source ---|---|--- 2026-08-27 09:34:14+00:00| seen| https://gist.github.com/alon710/99c22712e41b7fe8f253e2a2cd13cc6a...
CVE-2026-54556
creationtimestamp| type| source ---|---|--- 2026-08-27 09:34:14+00:00| seen| https://gist.github.com/alon710/99c22712e41b7fe8f253e2a2cd13cc6a...
GHSA-6X9P-4R67-5GJX
creationtimestamp| type| source ---|---|--- 2026-08-27 09:34:14+00:00| seen| https://gist.github.com/alon710/3db07e14b08e03003c4cb301f74837ed...
GHSA-V649-94V2-P72Q
creationtimestamp| type| source ---|---|--- 2026-08-27 02:01:16+00:00| seen| https://bsky.app/profile/slackers.it/post/3mtzquzxjvb23...
SUSE CVE-2026-72924
GitHub CLI gh is GitHub's official command line tool. Versions 2.28.0 through 2.97.0 bind the local listener created by gh codespace ports forward to all available network interfaces by default. While port forwarding is active, a service in a Codespace can therefore become reachable through the...
git-alerts v1.8.0
GitAlerts What problem does it solve? GitHub repositories created under any organization can be controlled by the GitHub administrators. However any repository created under an organization's user account is not controllable unless the organisation has adopted the GitHub enterprise-managed user E...
CVE-2026-44701
creationtimestamp| type| source ---|---|--- 2026-08-26 20:35:02+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-crx4-7mmq-j74j...
Binding to an Unrestricted IP Address
Overview Affected versions of this package are vulnerable to Binding to an Unrestricted IP Address through the ForwardPorts path in pkg/cmd/codespace/ports.go. An attacker can reach a forwarded Codespaces service from other hosts on the victim’s network by having the user run gh codespace ports...
CVE-2026-54550
creationtimestamp| type| source ---|---|--- 2026-08-26 16:35:15+00:00| published-proof-of-concept| https://github.com/izpack/izpack/security/advisories/GHSA-f63g-88cj-hjf9...
CVE-2026-54606
creationtimestamp| type| source ---|---|--- 2026-08-26 16:35:08+00:00| published-proof-of-concept| https://github.com/JiHong88/suneditor/security/advisories/GHSA-w93q-cq9w-58p7...
GHSA-2WXC-X7RJ-HG8F
creationtimestamp| type| source ---|---|--- 2026-08-26 16:20:29+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mtyqgjnvxv2o...
OPENSUSE-SU-2026:21663-1 Security update for gh
This update for gh fixes the following issues: Changes in gh: - Update to version 2.98.0: chore: fix extra whitespace Default Codespaces port forwarding to loopback Bump gh-aw-actions to v0.87.1 and recompile workflows Fix issue triage action compatibility choredeps: bump golang.org/x/crypto from...
GHSA-M2PC-3Q4Q-W6JR
creationtimestamp| type| source ---|---|--- 2026-08-26 13:31:41+00:00| seen| https://gist.github.com/alon710/d4e64579bb9348b8491cca97afa7743d...
GHSA-CMWV-WF9P-P8WX
creationtimestamp| type| source ---|---|--- 2026-08-26 12:32:44+00:00| seen| https://gist.github.com/alon710/f1f1abcaa50d05cc95fe39660771a422...