CVE-2026-82289

Gitingest through 0.3.1 fails to properly validate hostnames in validatehost, accepting any host with a git., gitlab., or github. prefix regardless of known-hosts list membership. Attackers can submit URLs with attacker-controlled hostnames to trigger outbound connections to arbitrary hosts and...

CVE-2026-82289 Gitingest Prefix-Based Git Host Check Enables Request Forgery and Token Disclosure

Gitingest through 0.3.1 fails to properly validate hostnames in validatehost, accepting any host with a git., gitlab., or github. prefix regardless of known-hosts list membership. Attackers can submit URLs with attacker-controlled hostnames to trigger outbound connections to arbitrary hosts and...

CVE-2026-82289 Gitingest Prefix-Based Git Host Check Enables Request Forgery and Token Disclosure

Gitingest through 0.3.1 fails to properly validate hostnames in validatehost, accepting any host with a git., gitlab., or github. prefix regardless of known-hosts list membership. Attackers can submit URLs with attacker-controlled hostnames to trigger outbound connections to arbitrary hosts and...

EUVD-2026-67820

Gitingest through 0.3.1 fails to properly validate hostnames in validatehost, accepting any host with a git., gitlab., or github. prefix regardless of known-hosts list membership. Attackers can submit URLs with attacker-controlled hostnames to trigger outbound connections to arbitrary hosts and...

CVE-2026-82289 Gitingest Prefix-Based Git Host Check Enables Request Forgery and Token Disclosure

Gitingest through 0.3.1 fails to properly validate hostnames in validatehost, accepting any host with a git., gitlab., or github. prefix regardless of known-hosts list membership. Attackers can submit URLs with attacker-controlled hostnames to trigger outbound connections to arbitrary hosts and...

CVE-2026-82289

Gitingest (through 0.3.1 ) has a flaw in its _validate_host function that accepts any hostname with a git. , gitlab. , or github. prefix without verifying membership in a known-hosts list. An attacker can supply a URL with a crafted hostname (e.g., github.evil.com), causing the application to ope...

PT-2026-83312

Gitingest through 0.3.1 fails to properly validate hostnames in validate host, accepting any host with a git., gitlab., or github. prefix regardless of known-hosts list membership. Attackers can submit URLs with attacker-controlled hostnames to trigger outbound connections to arbitrary hosts and...

EUVD-2024-52972

Malicious code in bioql PyPI...

CVE-2024-56074

gitingest before 9996a06 mishandles symbolic links that point outside of the base directory...

CVE-2024-56074

gitingest before 9996a06 mishandles symbolic links that point outside of the base directory...

PT-2024-36707 · Gitingest · Gitingest

Name of the Vulnerable Software and Affected Versions: gitingest versions before 9996a06 Description: The issue is related to the mishandling of symbolic links that point outside of the base directory. This can lead to a symbolic link traversal vulnerability. Recommendations: For gitingest versio...

CVE-2024-56074

gitingest before 9996a06 mishandles symbolic links that point outside of the base directory...

CVE-2024-56074

The gitingest tool (versions prior to 9996a06 ) is vulnerable to a symbolic link traversal flaw. The root cause is the software's improper handling of symbolic links that point outside of the base directory. This allows for potential unauthorized access or traversal of files outside the intended ...

CVE-2024-56074

gitingest before 9996a06 mishandles symbolic links that point outside of the base directory...

CVE-2024-56074

gitingest before 9996a06 mishandles symbolic links that point outside of the base directory...

GitIngest 安全漏洞

GitIngest is a tool by the individual developer Romain Courtois. Used to convert any GitHub repository to LLM for prompt-friendly text ingestion. A security vulnerability exists in versions prior to GitIngest 9996a06, which stems from incorrectly handling symbolic links pointing outside the base...