61 matches found
gh-safe-repo
gh-safe-repo Create GitHub repositories with safe defaults applied, in one command. gh-safe-repo new Branch protection, immutable tags, locked-down Actions, Dependabot, secret scanning with push protection, and private vulnerability reporting are all configured before you push your first commit...
PT-2026-53642
Improper Restriction of Excessive Authentication Attempts in GitHub repository wger-project/wger prior to 2.2...
PT-2026-51629
Name of the Vulnerable Software and Affected Versions Gogs versions prior to 0.14.3 Description An issue exists in the Repository.UploadRepoFiles function where symlink checks are performed only on the leaf of the upload target using osx.IsSymlinktargetPath, unlike other functions that validate...
GitPython path traversal vulnerability
GitPython is a Python library developed by gitpython-developers, designed for interacting with Git repositories. Versions of GitPython prior to 3.1.48 contained a path traversal vulnerability. This vulnerability stemmed from insufficient validation of reference paths during reference creation,...
GHSA-5QHX-GWFJ-6JQR Gogs user can update repository content with read-only permission
Vulnerability Description The endpoint PUT /repos/:owner/:repo/contents/ does not require write permissions and allows access with read permission only via repoAssignment. After passing the permission check, PutContents invokes UpdateRepoFile, which results in: Commit creation Execution of git pu...
CVE-2022-31578
The piaoyunsoft/btlnmp repository through 2019-10-10 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-0986
Reflected Cross-site Scripting XSS Vulnerability in GitHub repository hestiacp/hestiacp prior to 1.5.11...
CVE-2021-22200
An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.6. Under a special condition it was possible to access data of an internal repository through a public project fork as an anonymous user...
EUVD-2021-1119
Malware in sbrugna...
EUVD-2004-1435
Malware in sbrugna...
EUVD-2023-0811
Malicious code in bioql PyPI...
EUVD-2023-1147
Malicious code in bioql PyPI...
EUVD-2025-20825
Malicious code in bioql PyPI...
EUVD-2023-2583
Malicious code in bioql PyPI...
EUVD-2025-13599
Malicious code in bioql PyPI...
EUVD-2023-0590
Malicious code in bioql PyPI...
EUVD-2025-22775
Malicious code in bioql PyPI...
EUVD-2023-1602
Malicious code in bioql PyPI...