34878 matches found
EUVD-2026-72508
In JetBrains YouTrack before 2026.2.18634 a shared token cache allowed cross-tenant theft of GitHub App installation tokens...
CVE-2026-86492
In JetBrains YouTrack before 2026.2.18634 a shared token cache allowed cross-tenant theft of GitHub App installation tokens...
Malicious Package
Overview github-app-sts-action is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
PT-2026-86651
Interesting GitHub Security Lab disclosure: same-second TOCTOU in jupyterlab/maintainer-tools update-snapshots-checkout CVE-2026-84973. Race between checkout and snapshot update. Window is measured in the same second the workflow runs. Classic TOCTOU, but in a maintainer tooling path that many...
PT-2026-86864
In JetBrains YouTrack before 2026.2.18634 a shared token cache allowed cross-tenant theft of GitHub App installation tokens...
CVE-2026-86492: Exposure of Data Element to Wrong Session
In JetBrains YouTrack before 2026.2.18634 a shared token cache allowed cross-tenant theft of GitHub App installation tokens...
CVE-2010-5139
creationtimestamp| type| source ---|---|--- 2026-09-06 23:55:15+00:00| seen| https://gist.github.com/1440000bytes/211ac92dd4433bb1a2e674bf0ff7db2e 2026-09-07 00:00:43+00:00| seen| https://gist.github.com/1440000bytes/211ac92dd4433bb1a2e674bf0ff7db2e 2026-09-08 09:00:50+00:00| seen|...
CVE-2026-82751
creationtimestamp| type| source ---|---|--- 2026-09-06 17:35:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/idlfnokbigimu 2026-09-06 20:01:32+00:00| seen| https://gist.github.com/ichintu/a881adf8939998cb9caa6fc0349d18b6...
CVE-2026-86196
creationtimestamp| type| source ---|---|--- 2026-09-05 20:01:40+00:00| seen| https://gist.github.com/ichintu/4d7dd4674813d417824a1017200d1117...
PYSEC-2026-3721
creationtimestamp| type| source ---|---|--- 2026-09-05 17:06:04+00:00| seen| https://gist.github.com/konard/19347b7afef1e0d007ef83355a1dc3e5 2026-09-21 10:13:29+00:00| seen| https://gist.github.com/konard/ed0a4a3ae649badd8b7c3792537c0cda 2026-10-05 15:09:48+00:00| seen|...
CVE-2026-73088
creationtimestamp| type| source ---|---|--- 2026-09-05 16:13:11+00:00| seen| https://gist.github.com/djlan/e3b6762435f262eb64ea25ec3f8c9d82 2026-09-05 16:19:59+00:00| seen| https://gist.github.com/djlan/cceed0d99bfb6e25cf9c9ac2042ad728 2026-09-09 00:19:56+00:00| seen|...
GHSA-6V2G-FPXH-PMMH
creationtimestamp| type| source ---|---|--- 2026-09-05 14:31:44+00:00| seen| https://gist.github.com/alon710/e9c9321eb429f1e237680df95cb576b8...
GHSA-C6MW-8XH8-GPQ6
creationtimestamp| type| source ---|---|--- 2026-09-05 13:31:53+00:00| seen| https://gist.github.com/alon710/25de86a6a1fbd873e6db813795a47505...
GHSA-73J8-2GCH-69RQ
creationtimestamp| type| source ---|---|--- 2026-09-05 13:03:30+00:00| seen| https://gist.github.com/konard/512a90a3806a1c7a5364f6d1e4474f78 2026-09-05 16:47:42+00:00| seen| https://gist.github.com/konard/1f348647ebe071c63cce754dc60e1085 2026-09-05 17:05:59+00:00| seen|...
GHSA-848M-R628-VRXW
creationtimestamp| type| source ---|---|--- 2026-09-05 12:32:19+00:00| seen| https://gist.github.com/alon710/c72bc251650f3404e8bd8c874dab4c7c...
GHSA-66R2-5GWJ-GXM2
creationtimestamp| type| source ---|---|--- 2026-09-05 11:31:54+00:00| seen| https://gist.github.com/alon710/e67772431cb25b3e742f3376d1f6891a...
CVE-2026-63733
creationtimestamp| type| source ---|---|--- 2026-09-05 11:31:54+00:00| seen| https://gist.github.com/alon710/e67772431cb25b3e742f3376d1f6891a...
GHSA-5W7R-F4CG-RQQ7
creationtimestamp| type| source ---|---|--- 2026-09-05 10:31:56+00:00| seen| https://gist.github.com/alon710/abc6a26fdebf669c87f091f304527249...