33504 matches found
PT-2026-89392
Renovate, a dependency update tool, follows pagination links supplied by the GitHub server in the HTTP Link header when interacting with GitHub.com, GitHub Enterprise Cloud, or GitHub Enterprise Server, and sends the credentials configured for that host to the URL given as the 'next' page. Becaus...
PT-2026-89720
Code Injection in GitHub repository pytorchlightning/pytorch-lightning prior to 1.6.0...
PT-2026-89735
CI Branch Name OS Command Injection in @argos-ci/core Summary @argos-ci/[email protected] passes attacker-controlled CI branch/ref strings directly into an execSync template literal in packages/core/src/ci-environment/git.ts:89. When a CI project has hasRemoteContentAccess: false, the Argos upload flow...
CVE-2026-88881: URL Redirection to Untrusted Site
Renovate, a dependency update tool, follows pagination links supplied by the GitHub server in the HTTP Link header when interacting with GitHub.com, GitHub Enterprise Cloud, or GitHub Enterprise Server, and sends the credentials configured for that host to the URL given as the 'next' page. Becaus...
Identrail Cross-tenant IDOR: Client-supplied GitHub App installation_id is bound to the caller's workspace without ownership verification
Summary identrail's GitHub App connection-completion endpoint binds a fully client-supplied installationid to the caller's workspace without verifying that the installation belongs to, or was installed by, the workspace that initiated the connect flow. identrail then mints a GitHub App installati...
GHSA-CP3J-M783-3PH5 Identrail Cross-tenant IDOR: Client-supplied GitHub App installation_id is bound to the caller's workspace without ownership verification
Summary identrail's GitHub App connection-completion endpoint binds a fully client-supplied installationid to the caller's workspace without verifying that the installation belongs to, or was installed by, the workspace that initiated the connect flow. identrail then mints a GitHub App installati...
CVE-2026-78662
creationtimestamp| type| source ---|---|--- 2026-09-09 22:34:08+00:00| seen| https://gist.github.com/cwayne18/3474f4393a3ce289f2538aee39a18778 2026-09-10 00:01:53+00:00| seen| https://gist.github.com/cwayne18/3474f4393a3ce289f2538aee39a18778...
CVE-2026-56855
creationtimestamp| type| source ---|---|--- 2026-09-09 22:34:08+00:00| seen| https://gist.github.com/cwayne18/3474f4393a3ce289f2538aee39a18778 2026-09-10 00:01:53+00:00| seen| https://gist.github.com/cwayne18/3474f4393a3ce289f2538aee39a18778...
CVE-2026-50024
creationtimestamp| type| source ---|---|--- 2026-09-09 20:35:05+00:00| published-proof-of-concept| https://github.com/WangYihang/GitHacker/security/advisories/GHSA-hr3m-4qwq-3mgc...
CVE-2026-85730
creationtimestamp| type| source ---|---|--- 2026-09-09 19:31:51+00:00| seen| https://gist.github.com/alon710/d1e0c342d90c380e5c2e016452073fb0 2026-09-09 20:35:03+00:00| published-proof-of-concept| https://github.com/squirrelchat/smol-toml/security/advisories/GHSA-7w5x-hrqm-74c2...
CVE-2025-24979
creationtimestamp| type| source ---|---|--- 2026-09-09 19:05:37+00:00| published-proof-of-concept| https://github.com/lf-edge/ekuiper/security/advisories/GHSA-pqqc-8v73-9gg2...
CVE-2025-24978
creationtimestamp| type| source ---|---|--- 2026-09-09 18:35:56+00:00| published-proof-of-concept| https://github.com/lf-edge/ekuiper/security/advisories/GHSA-g8rh-fjm6-h2h9...
CVE-2025-58363
creationtimestamp| type| source ---|---|--- 2026-09-09 18:35:22+00:00| published-proof-of-concept| https://github.com/lf-edge/ekuiper/security/advisories/GHSA-c23q-fw86-9h5x...
CVE-2026-85622
creationtimestamp| type| source ---|---|--- 2026-09-09 17:22:57+00:00| seen| https://gist.github.com/mtholmquist/ab550712a4628c7c7c4705bceccd93b3 2026-09-09 17:22:57+00:00| seen| https://gist.github.com/mtholmquist/57afb96cf97414ce442f505da762c79d...
CVE-2026-85619
creationtimestamp| type| source ---|---|--- 2026-09-09 17:22:57+00:00| seen| https://gist.github.com/mtholmquist/ab550712a4628c7c7c4705bceccd93b3 2026-09-09 17:22:57+00:00| seen| https://gist.github.com/mtholmquist/57afb96cf97414ce442f505da762c79d...
GHSA-RVX4-FFVW-M9Q3
creationtimestamp| type| source ---|---|--- 2026-09-09 14:32:49+00:00| seen| https://gist.github.com/alon710/a3c9901fd3145b4f83e29fe00422ecb3 2026-09-15 15:00:05+00:00| seen| https://t.me/bdufstecru/3440 2026-09-16 00:00:29+00:00| published-proof-of-concept| https://t.me/bdufstecru/3440...
CVE-2026-84376
creationtimestamp| type| source ---|---|--- 2026-09-09 13:33:00+00:00| seen| https://gist.github.com/alon710/7126befe2979de3ccb30920f1ef42fab...
CVE-2026-62201
creationtimestamp| type| source ---|---|--- 2026-09-09 10:00:06+00:00| seen| https://t.me/GithubRedTeam/101779 2026-09-09 16:00:06+00:00| seen| Telegram/6CB9q72mBhsjQjI1J7xmJKbYDVj36uzEd2SQzSzeH690k 2026-09-10 00:00:34+00:00| published-proof-of-concept|...
CVE-2026-21085
creationtimestamp| type| source ---|---|--- 2026-09-09 08:11:50+00:00| seen| https://gist.github.com/ichintu/8de1b393c7903e975b41e200e6613355 2026-09-13 02:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvekss473z24...