RediShell: Critical remote code execution vulnerability in Redis(wiz.io)

111 points by mihau 1 year ago | 45 comments

Supply Chain Vuln Compromised Core AWS GitHub Repos & Threatened the AWS Console(wiz.io)

123 points by uvuv 9 months ago | 27 comments

Remote code execution in OpenSSH’s forwarded SSH-agent(blog.qualys.com)

233 points by vitplister 3 years ago | 140 comments

How to Get Remote Code Execution in Kafka UI(github.blog)

39 points by jandeboevrie 2 years ago | 3 comments

Critical vulnerability in AI coding platform Base44 allowing unauthorized access(wiz.io)

106 points by waldopat 1 year ago | 68 comments

Restructuring GitHub's bug bounty program(github.blog)

47 points by soheilpro 3 months ago | 22 comments

RCE Vulnerability in React and Next.js(github.com)

559 points by rayhaanj 10 months ago | 214 comments

GitHub security advisory GHSA-9qr9-h5gf-34mp for a critical (CVSS 10.0) remote code execution vulnerability in React Server Components affecting Next.js, with patched versions listed.

GitHub confirms breach of 3,800 repos via malicious VSCode extension(bleepingcomputer.com)

985 points by Timofeibu 5 months ago | 430 comments

BleepingComputer news article reporting that GitHub confirmed a breach of about 3,800 internal repositories via a malicious VSCode extension.

The GitHub wiki is an anti-pattern (2022)(michaelheap.com)

151 points by ibobev 1 month ago | 88 comments

A 2022 blog post by Michael Heap arguing that using the GitHub wiki for project documentation is an anti-pattern compared to a docs folder in the repo.

Breaking Git with a carriage return and cloning RCE(dgl.cx)

357 points by dgl 1 year ago | 147 comments

A blog post explaining CVE-2025-48384, a Git vulnerability where carriage return handling allows remote code execution via git clone --recursive on Unix-like systems.

GitHub is investigating unauthorized access to their internal repositories(twitter.com)

527 points by splenditer 5 months ago | 289 comments

A post on X from GitHub stating it is investigating unauthorized access to its internal repositories, with no current evidence of impact to customer data.

GitHub has not removed malicious imitation software after 3 weeks(successfulsoftware.net)

215 points by hermitcrab 1 month ago | 89 comments

A Successful Software blog post complaining that GitHub has not removed malicious software imitating the author's product three weeks after it was reported.