PT-2026-81860

GitHub CLI gh is GitHub's official command line tool. Versions 2.28.0 through 2.97.0 bind the local listener created by gh codespace ports forward to all available network interfaces by default. While port forwarding is active, a service in a Codespace can therefore become reachable through the...

JetBrains TeamCity < 2020.2.1 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2020.2.1. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2020.2.1, a user could get access to the GitHub access token of another user. CVE-2021-25774 - In JetBrains TeamCity before...

CVE-2026-55477

creationtimestamp| type| source ---|---|--- 2026-08-24 22:35:03+00:00| published-proof-of-concept| https://github.com/MHSanaei/3x-ui/security/advisories/GHSA-jm48-m3rr-9hgg 2026-08-25 12:31:18+00:00| seen| https://gist.github.com/alon710/782a9d0e0a33092c615e2219299ab6e3...

GHSA-4PH6-MJV7-3FQ6

creationtimestamp| type| source ---|---|--- 2026-08-24 21:31:53+00:00| seen| https://gist.github.com/alon710/420bec7ea2d482fe6de8ec25ca5555ea...

CVE-2026-54049

creationtimestamp| type| source ---|---|--- 2026-08-24 20:35:02+00:00| published-proof-of-concept| https://github.com/sakaiproject/sakai/security/advisories/GHSA-w2x5-gv52-9ccv 2026-10-02 17:20:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mwvv24trmq24 2026-10-02...

GHSA-3GJW-F78C-VVPW

creationtimestamp| type| source ---|---|--- 2026-08-24 20:31:44+00:00| seen| https://gist.github.com/alon710/0cbc434c452f0a0b70aa20e1c14d18f0...

CVE-2026-57863

creationtimestamp| type| source ---|---|--- 2026-08-24 19:33:13+00:00| seen| https://gist.github.com/sermikr0/cc58727e6a777b6ea1104e923803a0ba 2026-08-25 14:00:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtvy4xujeb27...

GHSA-63CW-57P8-FM3P

creationtimestamp| type| source ---|---|--- 2026-08-24 15:42:13+00:00| seen| https://gist.github.com/rahulXs/33981c9d91701115bb44ac406396c782...

CVE-2026-76847 act 0.2.81 through 0.2.89 Missing Authorization in the Artifacts V4 Backend

act starts an HTTP Artifacts V4 backend whenever a workflow uses actions/upload-artifact@v4 or actions/download-artifact@v4. The control-plane RPCs of that backend, including CreateArtifact, GetSignedArtifactURL, ListArtifacts, FinalizeArtifact and DeleteArtifact, accept a caller-supplied...

CVE-2026-76847

act starts an HTTP Artifacts V4 backend whenever a workflow uses actions/upload-artifact@v4 or actions/download-artifact@v4. The control-plane RPCs of that backend, including CreateArtifact, GetSignedArtifactURL, ListArtifacts, FinalizeArtifact and DeleteArtifact, accept a caller-supplied...

CVE-2025-37654

creationtimestamp| type| source ---|---|--- 2026-08-24 08:00:03+00:00| seen| https://t.me/GithubRedTeam/99424 2026-08-24 21:00:05+00:00| seen| Telegram/0Lzh2WjQOWsuTydOWekHZzZKDiwWQ3jcpMbWJHlr9UUA 2026-08-25 00:00:08+00:00| published-proof-of-concept|...

CVE-2026-52394

creationtimestamp| type| source ---|---|--- 2026-08-23 01:15:28+00:00| seen| https://gist.github.com/CAPTAIN1275/48a0b7d67d0e58cb05c607e0d715447c...

GHSA-RRMM-9V76-H3P4

creationtimestamp| type| source ---|---|--- 2026-08-22 19:00:06+00:00| seen| https://t.me/GithubRedTeam/98676 2026-08-23 00:00:11+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/98676...

GHSA-3P69-M8GG-FWMF

creationtimestamp| type| source ---|---|--- 2026-08-22 14:51:29+00:00| seen| https://gist.github.com/sl4x0/f22a1e5c94ebe3c82b21e85010eb6e32...

GHSA-R5PQ-6CHH-J3XP

creationtimestamp| type| source ---|---|--- 2026-08-22 12:31:57+00:00| seen| https://gist.github.com/alon710/31e18879d387aa16512f599cadd2f7a1...

GHSA-5VF6-JRQR-78FJ

creationtimestamp| type| source ---|---|--- 2026-08-22 11:31:40+00:00| seen| https://gist.github.com/alon710/d92488505ce17a941a9b8015b1dda8cf...

CVE-2026-63466

creationtimestamp| type| source ---|---|--- 2026-08-22 10:31:15+00:00| seen| https://gist.github.com/alon710/2b3f0356900578390c8450f33458882e...

GHSA-JG4P-G6XJ-4QMF

creationtimestamp| type| source ---|---|--- 2026-08-22 08:32:19+00:00| seen| https://gist.github.com/alon710/b7fa1b8a029c3e91e2e782156a414d06...

GHSA-CQMQ-8755-7XVH

creationtimestamp| type| source ---|---|--- 2026-08-22 07:32:13+00:00| seen| https://gist.github.com/alon710/fba1ad6c3ccaacdec698da20783bacca...

GHSA-MP57-R77R-477P

creationtimestamp| type| source ---|---|--- 2026-08-22 07:19:04+00:00| seen| https://gist.github.com/goncardanil40-creator/7ea6a1fd3f96528e27d2929f12660f72...