35897 matches found
GHSA-GX5P-JG67-6X7H vulnerabilities
Vulnerabilities for packages: keep...
CVE-2026-45033: Incorrect Behavior Order
GitHub Copilot CLI brings AI-powered coding assistance directly to your command line. Prior to 1.0.43, a security vulnerability has been identified in GitHub Copilot CLI where a malicious bare git repository nested inside a project directory can achieve arbitrary code execution when the agent...
CVE-2026-44246 nnU-Net: Agentic workflow injection in `.github/workflows/issue-triage.yml` of `MIC-DKFZ/nnUNet`
nnU-Net is a semantic segmentation framework that automatically adapts its pipeline to a dataset. Prior to 2.4.1, the nnU-Net Issue Triage workflow in .github/workflows/issue-triage.yml is vulnerable to Agentic Workflow Injection. The workflow sets allowednonwriteusers: $...
EUVD-2026-29841
nnU-Net is a semantic segmentation framework that automatically adapts its pipeline to a dataset. Prior to 2.4.1, the nnU-Net Issue Triage workflow in .github/workflows/issue-triage.yml is vulnerable to Agentic Workflow Injection. The workflow sets allowednonwriteusers: $...
CVE-2026-44246
The CVE concerns nnU-Net (MIC-DKFZ/nnUNet) before version 2.4.1. The issue lies in the nnU-Net Issue Triage workflow at .github/workflows/issue-triage.yml, which sets allowed_non_write_users: ${{ github.event.issue.user.login }}. This allows any logged-in GitHub user opening an issue to reach an ...
CVE-2026-46395
creationtimestamp| type| source ---|---|--- 2026-05-12 20:26:15+00:00| published-proof-of-concept| https://github.com/haxtheweb/issues/security/advisories/GHSA-6c8g-9hfh-pq5h 2026-06-09 19:00:13+00:00| published-proof-of-concept| Telegram/Twzxtbvyqic9grgE7JaZrbs3i9BOrZG8PBBvMyWgrTB7Ya8 2026-06-09...
CVE-2026-46396
creationtimestamp| type| source ---|---|--- 2026-05-12 20:26:06+00:00| published-proof-of-concept| https://github.com/haxtheweb/issues/security/advisories/GHSA-jh3h-rpxg-fr36...
CVE-2026-46393
creationtimestamp| type| source ---|---|--- 2026-05-12 20:23:35+00:00| published-proof-of-concept| https://github.com/haxtheweb/issues/security/advisories/GHSA-q862-gcgq-5m6g...
CVE-2026-45721
creationtimestamp| type| source ---|---|--- 2026-05-12 20:16:42+00:00| published-proof-of-concept| https://github.com/xyproto/algernon/security/advisories/GHSA-xwcr-wm99-g9jc...
Embedded Malicious Code
@tanstack/ packages are vulnerable to Embedded Malicious Code. The vulnerability is due to misconfigured GitHub Actions workflows and cache poisoning weaknesses that allowed attackers to extract OIDC tokens and publish malicious package versions under a trusted identity...
GHSA-MF9V-MFXR-J63J vulnerabilities
Vulnerabilities for packages: kubeflow-katib, confluent-docker-utils, kubeflow-pipelines-visualization-server, az, httpie, datadog-agent, superset, semgrep, py3-cassandra-medusa, pypy-3.11, ggshield, dask-kubernetes, open-webui, neuvector-manager, mlflow, aws-cli, pypy-3.10, kubeflow-pipelines,...
CVE-2026-41109
Improper neutralization of special elements in output used by a downstream component 'injection' in GitHub Copilot and Visual Studio allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-41109 GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability
...
CVE-2026-41109
Improper neutralization of special elements in output used by a downstream component 'injection' in GitHub Copilot and Visual Studio allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-41109
Technical details are not publicly available in the provided documents; monitor for updates.
CVE-2026-41109 GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability
...
GHSA-RHV4-8758-JX7V
creationtimestamp| type| source ---|---|--- 2026-05-12 15:40:29+00:00| seen| https://gist.github.com/alon710/d3518b26e6387505ec4774e026b70deb...
CVE-2026-42074
creationtimestamp| type| source ---|---|--- 2026-05-12 15:22:53+00:00| published-proof-of-concept| https://github.com/Gitlawb/openclaude/security/advisories/GHSA-m77w-p5jj-xmhg 2026-06-02 19:24:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mndd3o6o4n24 2026-06-04 07:00:20+00:00...
