CVE-2026-78678

creationtimestamp| type| source ---|---|--- 2026-09-08 20:35:07+00:00| published-proof-of-concept| https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-5xxx-qhh7-9287...

CVE-2026-78677

creationtimestamp| type| source ---|---|--- 2026-09-08 20:35:04+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-8mcc-hrx5-hvxc...

CVE-2026-87049

A flaw was found in operator-foundry. Untrusted external actors can exploit over-permissive GitHub access tokens and Google Cloud Platform GCP Workload Identity Federation credentials granted to a third-party reusable workflow. By invoking this workflow on untrusted-triggerable events without...

CVE-2026-62385

creationtimestamp| type| source ---|---|--- 2026-09-08 18:35:32+00:00| published-proof-of-concept| https://github.com/nltk/nltk/security/advisories/GHSA-568f-pv23-39p4...

CVE-2026-62383

creationtimestamp| type| source ---|---|--- 2026-09-08 18:35:28+00:00| published-proof-of-concept| https://github.com/nltk/nltk/security/advisories/GHSA-3hhw-38pf-pxj6...

CVE-2026-69125

creationtimestamp| type| source ---|---|--- 2026-09-08 18:35:14+00:00| published-proof-of-concept| https://github.com/axios/axios/security/advisories/GHSA-hcpx-6fm6-wx23...

CVE-2026-72790

creationtimestamp| type| source ---|---|--- 2026-09-08 18:35:10+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-74pj-6g7r-j55c...

GHSA-97QJ-X29F-37W7

creationtimestamp| type| source ---|---|--- 2026-09-08 18:21:13+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3muznaeuf6c26...

CVE-2026-81381

Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...

CVE-2026-81381

Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...

CVE-2026-81380

Improper neutralization of special elements used in a command 'command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...

CVE-2026-81380

Improper neutralization of special elements used in a command 'command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...

CVE-2026-81381

CVE-2026-81381 is an information disclosure vulnerability in GitHub Copilot and Visual Studio Code , caused by insufficiently protected credentials. An unauthorized remote attacker can disclose sensitive information over the network with low complexity and no privileges required. NVD assigns a CV...

EUVD-2026-73337

Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...

CVE-2026-81380

CVE-2026-81380 is a command injection flaw in GitHub Copilot and Visual Studio Code that can allow an unauthenticated remote attacker to disclose information over a network . The vulnerability is rated CVSS 3.1 5.3 (MEDIUM) with a high attack complexity, no required privileges, and required user ...

EUVD-2026-73336

Improper neutralization of special elements used in a command 'command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...

CVE-2026-70626

creationtimestamp| type| source ---|---|--- 2026-09-08 16:35:14+00:00| published-proof-of-concept| https://github.com/nltk/nltk/security/advisories/GHSA-r6gq-whwq-mvg9...

CVE-2026-65915

creationtimestamp| type| source ---|---|--- 2026-09-08 16:35:12+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-72r2-7mfr-5xr9...

CVE-2026-12259

creationtimestamp| type| source ---|---|--- 2026-09-08 16:35:07+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-5wp5-5229-5g6q 2026-09-08 20:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muzugs7i6b24...

GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability

Improper neutralization of special elements used in a command 'command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...