securitylab

Laboratoire de sécurité GitHub Ceci est le dépôt git principal du Laboratoire de sécurité GitHub. Nous l'utilisons à ces fins principales : Nous partageons avec notre communauté certaines bonnes pratiques en matière de recherche en sécurité et de divulgation de vulnérabilités dans notre...

gitxray

Welcome to Gitxray Gitxray short for Git X-Ray is a multifaceted security tool designed for use on GitHub repositories. It can serve many purposes, including OSINT and Forensics. gitxray leverages public GitHub REST APIs to gather information that would otherwise be very time-consuming to obtain...

allstar

Allstar !IMPORTANT تم إيقاف تطبيق Allstar المستضاف من OpenSSF. يستمر تطوير Allstar، وهو مشروع فرعي من OpenSSF Scorecard، — يجب عليك الآن تشغيله بنفسك، إما كإجراء GitHub أو كخدمة خلفية. راجع ossf/allstar881 لمزيد من التفاصيل. إذا كانت مؤسستك تعتمد على التطبيق المستضاف، راجع الانتقال من التطبيق...

Reposilite >= 3.3.0, < 3.5.12 - Arbitrary File Read

Reposilite is an open source, lightweight and easy-to-use repository manager for Maven based artifacts in JVM ecosystem. Reposilite v3.5.10 is affected by an Arbitrary File Read vulnerability via path traversal while serving expanded javadoc files. Reposilite has addressed this issue in version...

ROOT-APP-NPM-GHSA-WQVQ-JVPQ-H66F GHSA-wqvq-jvpq-h66f in nodemailer - Patched by Root

Root has patched GHSA-wqvq-jvpq-h66f in the nodemailer package for Root:npm. Multiple fixed versions available...

Autonomous OSS Threat Detection Via Taxonomy-Aligned LLMs

Open source software OSS ecosystems face growing threats from sophisticated supply chain attacks including typosquatting, dependency confusion, Trojan Source obfuscation, malicious build injection, and CI/CD pipeline poisoning. Existing detection approaches rely on signature-based tools and...

How we found 24 Android vulnerabilities using our open source AI security agent

With the rise of AI in the security space, our team created the GitHub Security Lab Taskflow Agent as a way for security researchers to easily automate, package, and share the AI prompts and workflows that they find effective for their work. In this blog post, I'll share how I created auditing...

AI-powered fuzzing with the GitHub Security Lab Taskflow Agent

If you 're new to fuzzing and want to learn the fundamentals first, check out our Fuzzing 101 course at gh.io/fuzzing101. Continuous fuzzing is not a magic solution that solves all your problems . Even projects that have been enrolled in OSS-Fuzz for years can still hide critical bugs, and the...

GHSA-5V7R-6R5C-R473

creationtimestamp| type| source ---|---|--- 2026-09-20 15:56:42+00:00| seen| https://gist.github.com/konard/4ad360f50626a30518f6308cbbc7cf43 2026-09-29 17:44:54+00:00| seen| https://gist.github.com/konard/e68bf0eca84e532b124333812dc61bdf 2026-09-29 18:32:30+00:00| seen|...

CVE-2026-72701

creationtimestamp| type| source ---|---|--- 2026-09-17 22:35:34+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-38p6-h87p-r4cg...

CVE-2026-69147

creationtimestamp| type| source ---|---|--- 2026-09-17 18:35:09+00:00| published-proof-of-concept| https://github.com/vllm-project/vllm/security/advisories/GHSA-8pw2-6jv3-mj5j...

GHSA-6J36-R6PR-59X4

creationtimestamp| type| source ---|---|--- 2026-09-17 15:12:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117287023853537355...

GHSA-7GCF-G7XR-8HXJ

creationtimestamp| type| source ---|---|--- 2026-09-16 08:42:54+00:00| seen| https://gist.github.com/konard/c75c144385121c66aab9af215012c487 2026-10-03 08:03:43+00:00| seen| https://gist.github.com/citadelculture/7a9642cc5c961c85323065559272c000...

GHSA-65H7-9WRW-629C

creationtimestamp| type| source ---|---|--- 2026-09-15 16:31:11+00:00| seen| https://gist.github.com/alon710/8bd3e264f91a00f434cd5f27c8d28e71...

GHSA-V859-C572-QH5P

creationtimestamp| type| source ---|---|--- 2026-09-14 22:32:03+00:00| seen| https://gist.github.com/alon710/526da095cc70f5c9bf54550d012a3cd3 2026-09-15 00:00:09+00:00| seen| https://gist.github.com/alon710/526da095cc70f5c9bf54550d012a3cd3...

GHSA-2883-XCG3-V3HH

creationtimestamp| type| source ---|---|--- 2026-09-13 23:02:40+00:00| seen| https://gist.github.com/konard/3df64f94bedef28845e3787306d32d25 2026-09-14 00:01:28+00:00| seen| https://gist.github.com/konard/3df64f94bedef28845e3787306d32d25 2026-09-15 12:45:46+00:00| seen|...

GHSA-98Q5-5QH2-7W75

creationtimestamp| type| source ---|---|--- 2026-09-12 04:32:07+00:00| seen| https://gist.github.com/alon710/c05d2b733514467507b538dab5375550...

GHSA-38XV-HF3P-H7MQ

creationtimestamp| type| source ---|---|--- 2026-09-11 11:32:31+00:00| seen| https://gist.github.com/alon710/31db43b5866ca861d12e36661fc88337...

CVE-2026-88017

creationtimestamp| type| source ---|---|--- 2026-09-11 00:35:23+00:00| published-proof-of-concept| https://github.com/rclone/rclone/security/advisories/GHSA-c476-6w5q-jw77 2026-09-11 11:09:30+00:00| seen| https://gist.github.com/alon710/bdeb340c6c170113e47b6e3cbfb5203b 2026-09-11 16:00:46+00:00|...

CVE-2026-88060

creationtimestamp| type| source ---|---|--- 2026-09-10 22:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv72xhjqk72f 2026-09-10 22:35:14+00:00| published-proof-of-concept| https://github.com/angular/angular/security/advisories/GHSA-v3p8-whq6-r5jg...