AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Companies

GitHub security advisories

40 advisories across github-mcp-server, copilot-cli, GitHub

Company profile
Critical 9.2Oct 14Sandboxed code can steal and silently exfiltrate the gh-aw job tokenGitHubGHSA-9jxf-w4wc-5g93fixed in v0.91.13Critical 9.2Oct 14GHSL-2026-180: Argv flag injection from MCP client into spawned `gh aw` subcommandsGitHubGHSA-f7r8-5pqp-q5p4fixed in v0.91.12Critical 9.3Oct 14GHSL-2026-184: Ungated MCP `mcp-inspect` executes attacker-declared stdio command (chained with ungated `add`)GitHubGHSA-x5hq-gjxf-pgxmfixed in v0.91.12Critical 9.2Oct 14GHSL-2026-188, GHSL-2026-189: Flag injection in MCP tool handlers via unseparated positional argumentsGitHubGHSA-62c8-mmw9-rq5wfixed in v0.91.12High 8.3Sep 23gh-aw: HTTPS egress allowlist bypass via TLS SNI domain frontingGitHubGHSA-x78f-wrrj-4h24fixed in 0.89.17High 7.4Sep 22GitHub Enterprise Server: cross-site scriptingEnterprise ServerCVE-2026-77912fixed in 3.17.* +3Critical 9.3Sep 22GitHub Enterprise Server: server-side request forgeryEnterprise ServerCVE-2026-77987fixed in 3.17.* +3Medium 6.0Sep 22GitHub Enterprise Server: insecure direct object referenceEnterprise ServerCVE-2026-75101fixed in 3.17.* +3High 7.7Sep 1GitHub Enterprise Server: server-side request forgeryEnterprise ServerCVE-2026-76851no fix yetHigh 7.7Sep 1GitHub Enterprise Server: race conditionEnterprise ServerCVE-2026-19118no fix yetHigh 8.2Sep 1GitHub Enterprise Server: server-side request forgeryEnterprise ServerCVE-2026-18730fixed in 3.17.* +3Critical 9.6Aug 29Arbitrary host filesystem & Docker-socket mounts via MCP server `mounts`GitHubGHSA-846c-fpfg-rj9mno fix yetCritical 9.1Aug 27Safe-output artifacts may expose CI trigger tokensGitHubGHSA-8h78-hpm7-29ggfixed in 0.85.4High 8.5Aug 25gh-aw: github.event.* command injection via heredoc-blind template guardrails (MCP config, all engines)GitHubGHSA-796c-cr8h-rr49no fix yetHigh 8.5Aug 16GitHub: command injectionGitHubGHSA-gh77-fhfh-2mc5fixed in v0.87.0High 8.8Aug 16GitHub: improper authorizationGitHubGHSA-r8gh-v7wv-8g7hfixed in v0.87.0Critical 9.1Aug 8gh-aw: safe-output validator forwards undeclared agent fields to the appliers (scope escape / mass assignment)GitHubGHSA-jxrq-hq57-gwwmfixed in v0.86.1Medium 6.5Aug 7gh-aw: unauthenticated prompt-injection to code execution in the shipped ai-moderator workflowGitHubGHSA-2cwf-x2h8-mqj5fixed in v0.86.1Critical 9.6Aug 7command injection in compiled workflow via unsanitized `sandbox.mcp.env` exportsGitHubGHSA-j77w-g4jj-hp99fixed in v0.86.0Medium 6.8Aug 7gh-aw: URL allowlist bypass via userinfo @ in the content sanitizer (exfiltration channel)GitHubGHSA-73j6-rcxw-76w7fixed in v0.86.0High 8.5Aug 6Safe-outputs config emitter: JSON injection via templated values despite env-var indirectionGitHubGHSA-2wjq-689w-pprhfixed in v0.78.0Medium 6.6Aug 5GitHub Enterprise Server: denial of serviceEnterprise ServerCVE-2026-15996no fix yetHigh 8.8Aug 5GitHub Enterprise Server: path traversalEnterprise ServerCVE-2026-17556no fix yetHigh 7.5Jul 28GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handlergithub-mcp-serverCVE-2026-47427fixed in 1.1.0Medium 5.3Jul 17GitHub Enterprise Server: missing authorizationEnterprise ServerCVE-2026-15783no fix yetMedium 5.7Jul 17GitHub Enterprise Server: denial of serviceEnterprise ServerCVE-2026-15007no fix yetHigh 8.6Jul 17GitHub Enterprise Server: path traversalEnterprise ServerCVE-2026-15343fixed in 3.17.* +3Medium 5.3Jul 1GitHub Enterprise Server: improper authorizationEnterprise ServerCVE-2026-14340no fix yetMedium 6.0Jun 25GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusiongithub-mcp-serverCVE-2026-48529fixed in 1.1.2Medium 4.7Jun 3CSP directive injection via sandbox, plugin_types, and report_to when given untrusted inputGitHubCVE-2026-54163fixed in 7.3.0High 7.8May 11GitHub Copilot CLI: Nested Bare Repository Can Execute Arbitrary Commands via core.fsmonitorcopilot-cliCVE-2026-45033fixed in 1.0.43HighMar 6GitHub Copilot CLI Dangerous Shell Expansion Patterns Enable Arbitrary Code Executioncopilot-cliCVE-2026-29783fixed in 0.0.423HighJan 24, 2025GitHub PAT written to debug artifactsGitHubCVE-2025-24362fixed in 3.28.3 +1HighJul 25, 2024Arbitrary File Overwrite in CodeQL versions less than 2.18.1GitHubCVE-2023-4759fixed in 2.18.1Low 2.7Feb 22, 2024Limited data exfiltration in CodeQL CLIGitHubCVE-2024-25129fixed in 2.16.3LowJan 31, 2022Improper Input Validation of `-database` ParameterGitHubCVE-2022-21687fixed in 1.1.3Medium 4.4May 25, 2021### Impact The CodeQL runner toolGitHubCVE-2021-32638fixed in codeql-bundle-20210304MediumJan 22, 2020Limited header injection when using dynamic overrides with user inputGitHubCVE-2020-5216fixed in ~3.9MediumJan 22, 2020Directive injection when using dynamic overrides with user inputGitHubCVE-2020-5217fixed in ~3.8HighNov 22, 2019Arbitrary code execution when opening a malicious workspaceGitHubCVE-2019-16765fixed in 1.0.1
About GitHub

GitHub is a proprietary developer platform that allows developers to create, store, manage, and share their code. Popular games such as 2048 and Hextris have been known to be hosted on the platform.

Elsewhere on Ibis: Paydays · Releases · Repos · Trending