Beveiligingsadvies

CVE-2026-82289

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-28 16:19:06

Laatst bijgewerkt 2026-08-28 20:21:01

Toegewezen door VulnCheck

CVSS-score 8.3

Status PUBLISHED

Beschrijving

Gitingest through 0.3.1 fails to properly validate hostnames in _validate_host, accepting any host with a git., gitlab., or github. prefix regardless of known-hosts list membership. Attackers can submit URLs with attacker-controlled hostnames to trigger outbound connections to arbitrary hosts and disclose GitHub personal access tokens via HTTP basic credentials.

← Alle CVE's bekijken Bekijk op cve.org ↗