CVE-2025-52569

GitForge.jl is a unified interface for interacting with Git "forges." Versions prior to 5.9.1 lack input validation of input validation for user-provided values in certain functions. In the GitHub.repo function, the user can provide any string for the reponame field. These inputs are not validate...

CVE-2025-52569

CVE-2025-52569 concerns GitForge.jl/GitHub.jl prior to 5.9.1. The issue is lack of input validation in the GitHub.repo() function: the repo_name field accepts any string and is sent to the server without proper encoding, enabling path traversal patterns such as ../ to access unintended GitHub API...