CVE-2026-12726

A flaw was found in the AWX GitHub webhook integration. When processing GitHub pullrequest webhooks, the controller stores the pullrequest.statusesurl value from the webhook payload without validating that it points to a trusted GitHub API endpoint. If a job template is configured with a GitHub...

GHSA-P8HW-RFJG-689H

creationtimestamp| type| source ---|---|--- 2025-10-02 12:32:45+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115304586574138947...