CVE-2026-50510

CVE-2026-50510 concerns the GitHub Copilot vulnerability affecting the JetBrains Copilot plugin prior to version 1.13.0. The issue is described as an improper restriction of names for files and other resources, enabling an attacker with local access to execute code on the affected system. The ass...

CVE-2025-66389

GitHub Copilot 1.372.0 is affected. The flaw allows filesystem access outside the workspace folder via a file-handler URI parameter to fetch_webpage, without user approval. This could enable exfiltration if an indirect prompt injection occurs. The CVSS 3.1 base score is 7.5 (HIGH) with network at...