CVE-2026-87049

A flaw was found in operator-foundry. Untrusted external actors can exploit over-permissive GitHub access tokens and Google Cloud Platform GCP Workload Identity Federation credentials granted to a third-party reusable workflow. By invoking this workflow on untrusted-triggerable events without...

CVE-2026-62385

creationtimestamp| type| source ---|---|--- 2026-09-08 18:35:32+00:00| published-proof-of-concept| https://github.com/nltk/nltk/security/advisories/GHSA-568f-pv23-39p4...

CVE-2026-62383

creationtimestamp| type| source ---|---|--- 2026-09-08 18:35:28+00:00| published-proof-of-concept| https://github.com/nltk/nltk/security/advisories/GHSA-3hhw-38pf-pxj6...

CVE-2026-69125

creationtimestamp| type| source ---|---|--- 2026-09-08 18:35:14+00:00| published-proof-of-concept| https://github.com/axios/axios/security/advisories/GHSA-hcpx-6fm6-wx23...

CVE-2026-72790

creationtimestamp| type| source ---|---|--- 2026-09-08 18:35:10+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-74pj-6g7r-j55c...

CVE-2026-81381

Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...

CVE-2026-81380

Improper neutralization of special elements used in a command 'command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...

CVE-2026-81380

Improper neutralization of special elements used in a command 'command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...

EUVD-2026-73337

Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...

CVE-2026-81381

CVE-2026-81381 is an information disclosure vulnerability in GitHub Copilot and Visual Studio Code , caused by insufficiently protected credentials. An unauthorized remote attacker can disclose sensitive information over the network with low complexity and no privileges required. NVD assigns a CV...

CVE-2026-81380

CVE-2026-81380 is a command injection flaw in GitHub Copilot and Visual Studio Code that can allow an unauthenticated remote attacker to disclose information over a network . The vulnerability is rated CVSS 3.1 5.3 (MEDIUM) with a high attack complexity, no required privileges, and required user ...

EUVD-2026-73336

Improper neutralization of special elements used in a command 'command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...

CVE-2026-70626

creationtimestamp| type| source ---|---|--- 2026-09-08 16:35:14+00:00| published-proof-of-concept| https://github.com/nltk/nltk/security/advisories/GHSA-r6gq-whwq-mvg9...

CVE-2026-65915

creationtimestamp| type| source ---|---|--- 2026-09-08 16:35:12+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-72r2-7mfr-5xr9...

CVE-2026-12259

creationtimestamp| type| source ---|---|--- 2026-09-08 16:35:07+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-5wp5-5229-5g6q 2026-09-08 20:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muzugs7i6b24...

GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability

Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...

GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability

Improper neutralization of special elements used in a command 'command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...

CVE-2026-71646

creationtimestamp| type| source ---|---|--- 2026-09-08 08:22:24+00:00| seen| https://gist.github.com/DongJiaxin0422/747d8e6c8afc0a364454b741b39bb98c...

CVE-2026-71645

creationtimestamp| type| source ---|---|--- 2026-09-08 08:19:53+00:00| seen| https://gist.github.com/DongJiaxin0422/5c01ce9ab3211463b20dc8e86e6464de...

CVE-2026-71644

creationtimestamp| type| source ---|---|--- 2026-09-08 08:18:15+00:00| seen| https://gist.github.com/DongJiaxin0422/6c39c3c59236bc2c8ec4b4182284fa7e 2026-09-11 17:20:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvb37uwjyp2f 2026-09-11 18:07:45+00:00| seen|...