Skip to content

CVE record · 1 source

CVE-2026-112050

CVSS 3.1

Gitify before 7.10.0 contains a login cross-site request forgery vulnerability that allows remote attackers to bind a victim's client to their…

Vendor: GitHub
Product: github
CVSS: 3.1

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

0

CVE NVD 13d ago

Gitify before 7.10.0 contains a login cross-site request forgery vulnerability that allows remote attackers to bind a victim's client to their…

Gitify before 7.10.0 contains a login cross-site request forgery vulnerability that allows remote attackers to bind a victim's client to their account because performGitHubWebOAuth() omits OAuth state validation. Attackers can…

CVSS 3.1 CVE-2026-112050 GitHub