r/webdev 🛠 Dev 👁 0

Pentesters found a crazy vulnerability on github yesterday (patched)

These guys were able to turn a simple git push command into a way to execute code on github.com's servers directly, they were able to get access other tenant's repos, including private ones. Pretty crazy stuff. The vulne

📄

This source provides headlines only. Use the button below to read the complete article on the original site.

📰 Read the original article on r/webdev

Originally published by r/webdev. Aggregated on AIWithGhost for educational purposes — full credit and traffic to the original publisher.