CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

CSIRTSSecurity advisory fusion

← All products & vendors

GitHub — security advisories

12 advisorieslatest 2026-08-11⚡ RSS feed

Tracked GitHub products:

GitHub Enterprise Server GitHub Copilot and Visual Studio Code GitHub Copilot Copilot and Visual Studio Code Enterprise Server GitHub CLI Copilot

⚡ Watch GitHub

Get an email when a new GitHub advisory drops — max one per day, one-click unsubscribe.

CVE-2026-64653: GitHub CLI: Unescaped variable components in request URLs could allow path traversal

unknownCVE-2026-64653msrc2026-08-11

CVE-2026-70335: GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability

highCVSS 7.8CVE-2026-70335msrc2026-08-11

CVE-2026-64655: GitHub CLI: Attestation Verification Bypass via Unescaped Regex Metacharacters in SAN Matching

unknownCVE-2026-64655msrc2026-08-11

CVE-2026-64654: GitHub CLI: Terminal escape sequence injection in multiple `gh` commands

unknownCVE-2026-64654msrc2026-08-11

CVE-2026-64652: GitHub CLI: Partial token disclosure in `gh auth status` output

lowCVSS 3.3CVE-2026-64652msrc2026-08-11

GitHub security advisory (AV26-783)

unknowncccs2026-08-06

GitHub security advisory (AV26-720)

unknowncccs2026-07-20

CVE-2026-47282: GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability

mediumCVSS 6.5CVE-2026-47282msrc2026-07-14

CVE-2026-50510: GitHub Copilot Remote Code Execution Vulnerability

highCVSS 7.8CVE-2026-50510msrc2026-07-14

CVE-2026-41109: GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability

highCVSS 8.8CVE-2026-41109msrc2026-07-14

GitHub security advisory (AV26-650)

unknowncccs2026-07-03

NCSC-2026-0219 [1.00] [M/H] Vulnerabilities fixed in GitHub Enterprise Server

unknownCVE-2026-10585 CVE-2026-9106 CVE-2026-9132ncsc-nl2026-07-03