CVE-2026-3854 (CVSS 8.7) enabled GitHub RCE via git push, risking cross-tenant access to millions of repositories.
GitHub has patched a high-severity remote code execution vulnerability that allowed anyone with push access to a private ...
Gemini CLI CVSS 10.0 flaw in versions below 0.39.1 enabled RCE in CI workflows, forcing Google to mandate explicit workspace ...
A design choice in the MCP SDKs allows remote code execution across the AI supply chain.
A critical remote code execution and supply chain vulnerability was recently discovered by researchers in Gemini CLI.
In early March, GitHub patched a critical remote code execution vulnerability (CVE-2026-3854) that could have allowed ...
Microsoft-owned open source code hosting platform GitHub has acknowledged and patched a critical vulnerability that allowed ...
Researchers say a prompt injection bug in Google's Antigravity AI coding tool could have let attackers run commands, despite ...