AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Packages

GitHub security advisories

36 advisories · 20 critical or high in 12 months · latest Oct 14

Advisories page

36 advisories

Critical 9.2Oct 14Sandboxed code can steal and silently exfiltrate the gh-aw job tokenGHSA-9jxf-w4wc-5g93fixed in v0.91.13Critical 9.2Oct 14GHSL-2026-180: Argv flag injection from MCP client into spawned `gh aw` subcommandsGHSA-f7r8-5pqp-q5p4fixed in v0.91.12Critical 9.3Oct 14GHSL-2026-184: Ungated MCP `mcp-inspect` executes attacker-declared stdio command (chained with ungated `add`)GHSA-x5hq-gjxf-pgxmfixed in v0.91.12Critical 9.2Oct 14GHSL-2026-188, GHSL-2026-189: Flag injection in MCP tool handlers via unseparated positional argumentsGHSA-62c8-mmw9-rq5wfixed in v0.91.12High 8.3Sep 23gh-aw: HTTPS egress allowlist bypass via TLS SNI domain frontingGHSA-x78f-wrrj-4h24fixed in 0.89.17High 7.4Sep 22GitHub Enterprise Server: cross-site scriptingCVE-2026-77912fixed in 3.17.* +3Critical 9.3Sep 22GitHub Enterprise Server: server-side request forgeryCVE-2026-77987fixed in 3.17.* +3Medium 6.0Sep 22GitHub Enterprise Server: insecure direct object referenceCVE-2026-75101fixed in 3.17.* +3High 7.7Sep 1GitHub Enterprise Server: server-side request forgeryCVE-2026-76851no fix yetHigh 7.7Sep 1GitHub Enterprise Server: race conditionCVE-2026-19118no fix yetHigh 8.2Sep 1GitHub Enterprise Server: server-side request forgeryCVE-2026-18730fixed in 3.17.* +3Critical 9.6Aug 29Arbitrary host filesystem & Docker-socket mounts via MCP server `mounts`GHSA-846c-fpfg-rj9mno fix yetCritical 9.1Aug 27Safe-output artifacts may expose CI trigger tokensGHSA-8h78-hpm7-29ggfixed in 0.85.4High 8.5Aug 25gh-aw: github.event.* command injection via heredoc-blind template guardrails (MCP config, all engines)GHSA-796c-cr8h-rr49no fix yetHigh 8.5Aug 16GitHub: command injectionGHSA-gh77-fhfh-2mc5fixed in v0.87.0High 8.8Aug 16GitHub: improper authorizationGHSA-r8gh-v7wv-8g7hfixed in v0.87.0Critical 9.1Aug 8gh-aw: safe-output validator forwards undeclared agent fields to the appliers (scope escape / mass assignment)GHSA-jxrq-hq57-gwwmfixed in v0.86.1Medium 6.5Aug 7gh-aw: unauthenticated prompt-injection to code execution in the shipped ai-moderator workflowGHSA-2cwf-x2h8-mqj5fixed in v0.86.1Critical 9.6Aug 7command injection in compiled workflow via unsanitized `sandbox.mcp.env` exportsGHSA-j77w-g4jj-hp99fixed in v0.86.0Medium 6.8Aug 7gh-aw: URL allowlist bypass via userinfo @ in the content sanitizer (exfiltration channel)GHSA-73j6-rcxw-76w7fixed in v0.86.0High 8.5Aug 6Safe-outputs config emitter: JSON injection via templated values despite env-var indirectionGHSA-2wjq-689w-pprhfixed in v0.78.0Medium 6.6Aug 5GitHub Enterprise Server: denial of serviceCVE-2026-15996no fix yetHigh 8.8Aug 5GitHub Enterprise Server: path traversalCVE-2026-17556no fix yetMedium 5.3Jul 17GitHub Enterprise Server: missing authorizationCVE-2026-15783no fix yetMedium 5.7Jul 17GitHub Enterprise Server: denial of serviceCVE-2026-15007no fix yetHigh 8.6Jul 17GitHub Enterprise Server: path traversalCVE-2026-15343fixed in 3.17.* +3Medium 5.3Jul 1GitHub Enterprise Server: improper authorizationCVE-2026-14340no fix yetMedium 4.7Jun 3CSP directive injection via sandbox, plugin_types, and report_to when given untrusted inputCVE-2026-54163fixed in 7.3.0HighJan 24, 2025GitHub PAT written to debug artifactsCVE-2025-24362fixed in 3.28.3 +1HighJul 25, 2024Arbitrary File Overwrite in CodeQL versions less than 2.18.1CVE-2023-4759fixed in 2.18.1Low 2.7Feb 22, 2024Limited data exfiltration in CodeQL CLICVE-2024-25129fixed in 2.16.3LowJan 31, 2022Improper Input Validation of `-database` ParameterCVE-2022-21687fixed in 1.1.3Medium 4.4May 25, 2021### Impact The CodeQL runner toolCVE-2021-32638fixed in codeql-bundle-20210304MediumJan 22, 2020Limited header injection when using dynamic overrides with user inputCVE-2020-5216fixed in ~3.9MediumJan 22, 2020Directive injection when using dynamic overrides with user inputCVE-2020-5217fixed in ~3.8HighNov 22, 2019Arbitrary code execution when opening a malicious workspaceCVE-2019-16765fixed in 1.0.1
About GitHub

Security advisories GitHub publishes for its own products.

enterprise.github.com/releasesGitHub

GitHub elsewhere on Ibis: Paydays · Releases · Repos · Trending