22712 matches found
CVE-2026-56443 Token public-only scope bypassed on Limited-visibility owners (Repository + Package categories) — residual after CVE-2026-25714 / PR #37118
Token public-only scope bypassed on Limited-visibility owners Repository + Package categories — residual after CVE-2026-25714 / PR 37118...
CVE-2026-56443 Token public-only scope bypassed on Limited-visibility owners (Repository + Package categories) — residual after CVE-2026-25714 / PR #37118
Token public-only scope bypassed on Limited-visibility owners Repository + Package categories — residual after CVE-2026-25714 / PR 37118...
CVE-2026-56443 Token public-only scope bypassed on Limited-visibility owners (Repository + Package categories) — residual after CVE-2026-25714 / PR #37118
Token public-only scope bypassed on Limited-visibility owners Repository + Package categories — residual after CVE-2026-25714 / PR 37118...
CVE-2026-58433: Missing Authorization
Team-repository linking endpoint bypasses the RepoAdminChangeTeamAccess organization setting...
PT-2026-71701
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description The team-repository linking endpoint bypasses the RepoAdminChangeTeamAccess organization setting, which is intended to control whether repository administrators...
CVE-2026-58437: Improper Access Control
Repository Visibility Manipulation via Git Push Options...
CVE-2026-57886: Authorization Bypass Through User-Controlled Key
Cross-repository issue/comment attachment re-linking can expose private attachment content...
CVE-2026-58416: Improper Handling of Insufficient Permissions or Privileges
Fork-PR Actions task can read a third private repository via the collaborative-owner branch missing fork-PR guard...
CVE-2026-57894: Server-Side Request Forgery (SSRF)
Repository Migration Follows Git HTTP Redirects After URL Allow/Block Validation, Enabling Internal Git Repository Exfiltration...
CVE-2026-58445: Observable Discrepancy
Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API...
CVE-2026-58443: Incorrect Authorization
Public-only repository tokens can update private PR head branches...
CVE-2026-58442: Exposure of Sensitive Information to an Unauthorized Actor
Repository migration SSRF via multi-answer DNS allow-list bypass...
CVE-2026-58438: Missing Authorization
Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access...
CVE-2026-56443: Incorrect Authorization
Token public-only scope bypassed on Limited-visibility owners Repository + Package categories — residual after CVE-2026-25714 / PR 37118...
CVE-2026-58444: Incorrect Authorization
Personal access token scope enforcement bypass on the repository home page GET /owner/repo discloses private repository contents...
CVE-2026-24059: Improper Privilege Management
The GET /api/v1/user/actions/runners/registration-token endpoint and its owner- and repository-level equivalents creates a new runner registration token if none exists, yet the API scope middleware classifies it as read-only because it is a GET request. A holder of a leaked read:user-scoped token...
CVE-2026-70547
An authenticated user without repository read permission may access package metadata under specific conditions...
CVE-2026-73294
Semaphore UI prior to versions 2.18.17 and 2.19.5-beta2 is affected by an OS command injection in the repository git_url handling. The flaw allows an attacker with project Manager/Owner privileges to influence CmdGitClient.GetLastRemoteCommitHash via a crafted --upload-pack option sent through PO...
