Vulnerabilities

Summary — last 7 days

New vulnerabilities2,629▼ 216 vs. last week
Critical / high1,378▲ 154 vs. last week
New active exploitation (KEV)7▼ 3 vs. last week
Unscored (no CVSS)81▼ 449 vs. last week
–

1 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
Awaiting AnalysisMedium (4.4)0.33%—Github CLIAIGithub CodespaceAIMicrosoft Visual Studio CodeAI7/9/20267/14/2026
GitHub CLI (gh) is GitHub’s official command line tool. From 2.10.0 through 2.95.0, connecting to a malicious Codespace with gh codespace jupyter can allow command execution because the command opens a JupyterLab URL supplied by a process inside the Codespace without validating that it is a loopback HTTP or HTTPS…