These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
GitHub CLI (gh) versions prior to 2.97.0 are vulnerable to a supply chain verification bypass due to improper handling of regex metacharacters in the --signer-repo and --signer-workflow flag values. An attacker can register a lookalike repository and produce valid attestations to bypass Sigstore attestation verification. This issue affects organizations using GitHub CLI (gh) in CI/CD pipelines or policy g [truncated]
A path traversal vulnerability was identified in GitHub Enterprise Server, allowing an unauthenticated attacker to delete arbitrary files and directories. The vulnerability was caused by the use of the X-GitHub-Request-Id request header without sanitization as a filesystem path segment. Exploitation required only network reachability to the instance and no authentication. This vulnerability affected all v [truncated]
A denial-of-service vulnerability was found in GitHub MCP Server before version 1.1.0. The CompletionsHandler function in pkg/github/server.go accesses params.Ref without checking if it is nil, leading to a nil pointer dereference and Go runtime panic when a completion/complete request with a missing or empty ref field is sent. This issue can be triggered by any unauthenticated client able to send JSON-RP [truncated]
CVE-2026-54163 is a MEDIUM severity vulnerability in secure_headers that allows attackers to inject Content-Security-Policy directives. This issue, fixed in version 7.3.0, enables attackers to inject CSP directives such as script-src 'unsafe-inline' * before the legitimate script-src, potentially leading to XSS or CSP report exfiltration. The vulnerability arises from the insecure construction of the Cont [truncated]
A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user with write access to any repository to read metadata from private repositories they did not have access to. The vulnerability affected all versions of GitHub Enterprise Server prior to 3.22 and was fixed in versions 3.17.18, 3.18.12, 3.19.9, 3.20.5, and 3.21.3. This vulnerability could allow [truncated]
A path traversal vulnerability was identified in GitHub Enterprise Server, allowing an attacker with code execution inside the Dependabot updater container to write files to arbitrary repository paths. This included GitHub Actions workflow files under .github/workflows/. If the repository used a pull_request_target workflow or had auto-merge enabled, an injected workflow could execute with access to the r [truncated]
CVE-2026-15007 is a denial of service vulnerability in GitHub Enterprise Server that allows an authenticated user to cause service disruption by supplying a repository release notes configuration file containing deeply nested YAML. This issue affects all versions of GitHub Enterprise Server prior to 3.22. The vulnerability was fixed in versions 3.17.18, 3.18.12, 3.19.9, 3.20.5, and 3.21.3. The vulnerabili [truncated]
CVE-2025-66389 is a vulnerability in GitHub Copilot 1.372.0 that allows filesystem access outside of a workspace folder without user approval. This occurs via a file-handler URI parameter to fetch_webpage, potentially leading to exfiltration if there is indirect prompt injection. The CVE was published on June 22, 2026. Affected users should review and update their installations to mitigate potential risks [truncated]
A critical server-side request forgery (SSRF) vulnerability in GitHub Enterprise Server allowed unauthenticated attackers to redirect internal API calls by injecting path traversal sequences into upload endpoint parameters. The flaw, rooted in insufficient input validation, enabled access to internal services and potential credential exposure. GitHub resolved this across multiple release branches; adminis [truncated]
A Server-Side Request Forgery (SSRF) vulnerability in GitHub Enterprise Server's security advisories package lookup feature allowed attackers to direct HTTP requests to internal services. By targeting an internal management service and analyzing response timing, attackers could infer sensitive environment variable values including signing secrets and private keys. The vulnerability required GitHub Package [truncated]
CVE-2026-29783 describes an arbitrary code execution issue in the shell tool used by GitHub Copilot CLI. In affected versions prior to and including 0.0.422, crafted bash parameter expansion patterns could make a command appear "read-only" to the safety layer while still embedding executable behavior. GitHub states the issue is fixed in 0.0.423.