36492 matches found
@george.talusan/node-red-contrib-copilot (>=0.0.5, <=1.0.5), @github/copilot-sdk (>=0.1.9, <=0.1.31-unstable.0) +29 more potentially affected by CVE-2026-45033 via @github/copilot (>=0.0.375, <=1.0.40)
@github/copilot NPM version =0.0.375, =0.0.5, =0.1.9, =1.0.4, =1.1.0, =0.0.0, =0.13.0, =0.1.38, =0.0.1, =0.12.6, =0.8.5, =0.6.0, =0.6.1, =0.6.8, =1.2.3, =1.6.3 and more Source cves: CVE-2026-45033 Source advisory: MEND:CVE-2026-45033...
CVE-2026-45033
GitHub Copilot CLI (affected component: Git operations in Copilot CLI) contains a local privilege/command execution flaw exposed when a malicious bare git repository is nested within a project directory. The issue arises from git auto-discovery of bare repositories during directory traversal, all...
CVE-2026-45033
GitHub Copilot CLI brings AI-powered coding assistance directly to your command line. Prior to 1.0.43, a security vulnerability has been identified in GitHub Copilot CLI where a malicious bare git repository nested inside a project directory can achieve arbitrary code execution when the agent...
neo-pocs
neo-pocs Containerized proof-of-concept packages for reviewed...
CVE-2026-45803
creationtimestamp| type| source ---|---|--- 2026-05-13 15:20:46+00:00| published-proof-of-concept| https://github.com/cli/cli/security/advisories/GHSA-crc3-h8v6-qh57...
CVE-2026-44970
creationtimestamp| type| source ---|---|--- 2026-05-13 15:01:46+00:00| published-proof-of-concept| https://github.com/dbt-labs/dbt-mcp/security/advisories/GHSA-jj54-r8gm-2fcf...
CVE-2026-44969
creationtimestamp| type| source ---|---|--- 2026-05-13 15:01:34+00:00| published-proof-of-concept| https://github.com/dbt-labs/dbt-mcp/security/advisories/GHSA-7xgw-6qf3-7w59...
CVE-2026-45616
creationtimestamp| type| source ---|---|--- 2026-05-13 14:00:05+00:00| seen| https://t.me/GithubRedTeam/84084 2026-05-13 21:00:04+00:00| published-proof-of-concept| Telegram/O41s4ZacceniC-zmRdA20LKtlUfLN8dJaI2Rmc1hsAXigiA...
CVE-2026-46339
creationtimestamp| type| source ---|---|--- 2026-05-13 13:15:48+00:00| published-proof-of-concept| https://github.com/decolua/9router/security/advisories/GHSA-fhh6-4qxv-rpqj 2026-07-15 06:00:04+00:00| confirmed|...
Generation of Error Message Containing Sensitive Information
Overview composer/composer is a Dependency Manager for PHP. Composer helps you declare, manage and install dependencies of PHP projects. It ensures you have the right stack everywhere. Affected versions of this package are vulnerable to Generation of Error Message Containing Sensitive Information...
Github Actions issued GITHUB_TOKEN disclosure in GitHub Actions logs
Summary Composer leaks the full contents of tokens configured as GitHub OAuth tokens if they do not match Composer's expected format for such tokens to stderr. GitHub has introduced a new format for GitHub Actions GITHUBTOKEN values. These tokens are validated in the same way by Composer on GitHu...
Github Actions issued GITHUB_TOKEN disclosure in GitHub Actions logs
More info at https://github.com/composer/composer/security/advisories/GHSA-f9f8-rm49-7jv2...
GHSA-C4J6-FC7J-M34R
creationtimestamp| type| source ---|---|--- 2026-05-13 06:02:34+00:00| seen| https://t.me/GithubRedTeam/84034 2026-05-13 09:00:04+00:00| seen| Telegram/6gD9pQtVCgeRlU-Eqvw6JM83wq5C4Rc0rf2uF-yzttPU 2026-05-15 00:16:17+00:00| seen| https://gist.github.com/hahwul/e82a1e91f75872e43287743d4a15d035...
GHSA-GX5P-JG67-6X7H vulnerabilities
Vulnerabilities for packages: keep...
CVE-2026-45033: Incorrect Behavior Order
GitHub Copilot CLI brings AI-powered coding assistance directly to your command line. Prior to 1.0.43, a security vulnerability has been identified in GitHub Copilot CLI where a malicious bare git repository nested inside a project directory can achieve arbitrary code execution when the agent...
CVE-2026-44246 nnU-Net: Agentic workflow injection in `.github/workflows/issue-triage.yml` of `MIC-DKFZ/nnUNet`
nnU-Net is a semantic segmentation framework that automatically adapts its pipeline to a dataset. Prior to 2.4.1, the nnU-Net Issue Triage workflow in .github/workflows/issue-triage.yml is vulnerable to Agentic Workflow Injection. The workflow sets allowednonwriteusers: $...
CVE-2026-44246
The CVE concerns nnU-Net (MIC-DKFZ/nnUNet) before version 2.4.1. The issue lies in the nnU-Net Issue Triage workflow at .github/workflows/issue-triage.yml, which sets allowed_non_write_users: ${{ github.event.issue.user.login }}. This allows any logged-in GitHub user opening an issue to reach an ...
EUVD-2026-29841
nnU-Net is a semantic segmentation framework that automatically adapts its pipeline to a dataset. Prior to 2.4.1, the nnU-Net Issue Triage workflow in .github/workflows/issue-triage.yml is vulnerable to Agentic Workflow Injection. The workflow sets allowednonwriteusers: $...
CVE-2026-46395
creationtimestamp| type| source ---|---|--- 2026-05-12 20:26:15+00:00| published-proof-of-concept| https://github.com/haxtheweb/issues/security/advisories/GHSA-6c8g-9hfh-pq5h 2026-06-09 19:00:13+00:00| published-proof-of-concept| Telegram/Twzxtbvyqic9grgE7JaZrbs3i9BOrZG8PBBvMyWgrTB7Ya8 2026-06-09...