34883 matches found
CVE-2026-46696
creationtimestamp| type| source ---|---|--- 2026-09-15 01:32:02+00:00| seen| https://gist.github.com/alon710/a0fdd505cf6388a20a8132f22b04c968...
GHSA-2FF2-MX52-Q8WP
creationtimestamp| type| source ---|---|--- 2026-09-15 00:31:20+00:00| seen| https://gist.github.com/alon710/65b5c64d62229349e54e21de9ec5c14b...
CVE-2026-49400
creationtimestamp| type| source ---|---|--- 2026-09-15 00:31:20+00:00| seen| https://gist.github.com/alon710/65b5c64d62229349e54e21de9ec5c14b...
CVE-2026-16335
creationtimestamp| type| source ---|---|--- 2026-09-15 00:04:06+00:00| seen| https://gist.github.com/ichintu/bb350504840f7717d8931db615795f78...
CVE-2026-58502: Improper Neutralization of Special Elements used in an OS Command
githubtoplanguages generates a user's top GitHub languages as an SVG. The .github/workflows/discord-issue.yml workflow runs when an issue is opened or closed and interpolates github.event.issue.title directly into the Bash assignment for ISSUETITLE before shell parsing. An issue title containing...
CVE-2026-54168: Improper Privilege Management
Pipelines-as-Code is a CI/CD system that lets users define Tekton pipelines in source code repositories. Prior to 0.37.8, 0.39.6, 0.42.1, and 0.48.0, a GitHub App installation token created during webhook processing is not scoped to the repository that triggered the event when the App is installe...
CVE-2026-54167: Insufficient Verification of Data Authenticity
Pipelines-as-Code is a CI/CD system that lets users define Tekton pipelines in source code repositories. Prior to 0.37.8, 0.39.6, 0.42.1, and 0.48.0, the GitHub App provider accepts X-GitHub-Enterprise-Host as the API host while processing webhook events containing an installation.id, before...
An Exploratory Study of Dependabot Cooldown Adoption in Open-Source GitHub Projects
Automated dependency updates can rapidly propagate malicious package releases before maintainers and the broader community have enough time to detect them. In July 2025, GitHub made Dependabot cooldown generally available as a defense against software supply chain attacks. However, the effects of...
PT-2026-92173
githubtoplanguages generates a user's top GitHub languages as an SVG. The .github/workflows/discord-issue.yml workflow runs when an issue is opened or closed and interpolates github.event.issue.title directly into the Bash assignment for ISSUE TITLE before shell parsing. An issue title containing...
GHSA-VRH8-C9CM-WH8V
creationtimestamp| type| source ---|---|--- 2026-09-14 23:32:13+00:00| seen| https://gist.github.com/alon710/5201f77ce91c5d1ec9edcecc53a2d050 2026-09-15 00:00:09+00:00| seen| https://gist.github.com/alon710/5201f77ce91c5d1ec9edcecc53a2d050...
CVE-2026-84567
creationtimestamp| type| source ---|---|--- 2026-09-14 22:42:31+00:00| seen| https://gist.github.com/ataberk-xyz/2c387bbc201a6ab0d6ed0c4cb610d86a 2026-09-15 00:00:09+00:00| seen| https://gist.github.com/ataberk-xyz/2c387bbc201a6ab0d6ed0c4cb610d86a 2026-09-15 04:50:49+00:00| seen|...
CVE-2026-76081
creationtimestamp| type| source ---|---|--- 2026-09-14 22:32:03+00:00| seen| https://gist.github.com/alon710/526da095cc70f5c9bf54550d012a3cd3 2026-09-15 00:00:09+00:00| seen| https://gist.github.com/alon710/526da095cc70f5c9bf54550d012a3cd3...
GHSA-V859-C572-QH5P
creationtimestamp| type| source ---|---|--- 2026-09-14 22:32:03+00:00| seen| https://gist.github.com/alon710/526da095cc70f5c9bf54550d012a3cd3 2026-09-15 00:00:09+00:00| seen| https://gist.github.com/alon710/526da095cc70f5c9bf54550d012a3cd3...
GHSA-2XMM-M4WV-3FJH
creationtimestamp| type| source ---|---|--- 2026-09-14 21:31:27+00:00| seen| https://gist.github.com/alon710/baad95ed8a6cf5e02f207178d3a44686...
CVE-2026-90814
A Server-Side Request Forgery (SSRF) vulnerability exists in cosmicstack-labs mercury-agent up to version 1.1.13 . The flaw is in the githubRequest function within the GitHub API Handler component (file src/utils/github.ts), where manipulation of the path argument allows a remote, low-privilege a...
EUVD-2026-77775
A flaw has been found in cosmicstack-labs mercury-agent up to 1.1.13. Affected by this vulnerability is the function githubRequest of the file src/utils/github.ts of the component GitHub API Handler. This manipulation of the argument path causes server-side request forgery. Remote exploitation of...
CVE-2026-90814 cosmicstack-labs mercury-agent GitHub API github.ts githubRequest server-side request forgery
A flaw has been found in cosmicstack-labs mercury-agent up to 1.1.13. Affected by this vulnerability is the function githubRequest of the file src/utils/github.ts of the component GitHub API Handler. This manipulation of the argument path causes server-side request forgery. Remote exploitation of...
CVE-2026-90814 cosmicstack-labs mercury-agent GitHub API github.ts githubRequest server-side request forgery
A flaw has been found in cosmicstack-labs mercury-agent up to 1.1.13. Affected by this vulnerability is the function githubRequest of the file src/utils/github.ts of the component GitHub API Handler. This manipulation of the argument path causes server-side request forgery. Remote exploitation of...