14 matches found
CVE-2026-82289
Gitingest through 0.3.1 fails to properly validate hostnames in validatehost, accepting any host with a git., gitlab., or github. prefix regardless of known-hosts list membership. Attackers can submit URLs with attacker-controlled hostnames to trigger outbound connections to arbitrary hosts and...
CVE-2026-82289 Gitingest Prefix-Based Git Host Check Enables Request Forgery and Token Disclosure
Gitingest through 0.3.1 fails to properly validate hostnames in validatehost, accepting any host with a git., gitlab., or github. prefix regardless of known-hosts list membership. Attackers can submit URLs with attacker-controlled hostnames to trigger outbound connections to arbitrary hosts and...
EUVD-2026-67820
Gitingest through 0.3.1 fails to properly validate hostnames in validatehost, accepting any host with a git., gitlab., or github. prefix regardless of known-hosts list membership. Attackers can submit URLs with attacker-controlled hostnames to trigger outbound connections to arbitrary hosts and...
CVE-2026-82289 Gitingest Prefix-Based Git Host Check Enables Request Forgery and Token Disclosure
Gitingest through 0.3.1 fails to properly validate hostnames in validatehost, accepting any host with a git., gitlab., or github. prefix regardless of known-hosts list membership. Attackers can submit URLs with attacker-controlled hostnames to trigger outbound connections to arbitrary hosts and...
CVE-2026-82289
Gitingest (through 0.3.1 ) has a flaw in its _validate_host function that accepts any hostname with a git. , gitlab. , or github. prefix without verifying membership in a known-hosts list. An attacker can supply a URL with a crafted hostname (e.g., github.evil.com), causing the application to ope...
EUVD-2024-52972
Malicious code in bioql PyPI...
CVE-2024-56074
gitingest before 9996a06 mishandles symbolic links that point outside of the base directory...
CVE-2024-56074
gitingest before 9996a06 mishandles symbolic links that point outside of the base directory...
PT-2024-36707 · Gitingest · Gitingest
Name of the Vulnerable Software and Affected Versions: gitingest versions before 9996a06 Description: The issue is related to the mishandling of symbolic links that point outside of the base directory. This can lead to a symbolic link traversal vulnerability. Recommendations: For gitingest versio...
CVE-2024-56074
gitingest before 9996a06 mishandles symbolic links that point outside of the base directory...
CVE-2024-56074
CVE-2024-56074 affects gitingest prior to version 9996a06, where symbolic links pointing outside the base directory are mishandled. The issue is described as a symbolic-link traversal vulnerability in gitingest’s handling of links outside the base directory. No exploitation status is provided in ...
GitIngest 安全漏洞
GitIngest is a tool by the individual developer Romain Courtois. Used to convert any GitHub repository to LLM for prompt-friendly text ingestion. A security vulnerability exists in versions prior to GitIngest 9996a06, which stems from incorrectly handling symbolic links pointing outside the base...