Threat database

1 threat

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.1	EPSS 0.2%	CVE-2026-105221gist · Improper Certificate Validation Critical9.1EPSS 0.2%2026-10-04CVE Database V5CVE-2026-105221 CVE-2026-105221 is a critical vulnerability in the gist RubyGem before version 6.1.0. It involves improper certificate validation due to the http_connection in lib/gist.rb setting VERIFY_NONE. This flaw allows on-path attackers to intercept and modify HTTPS traffic to the GitHub API, potentially stealing OAuth tokens and login credentials to access and alter the victim's gists. EPSS 0.2%Vulnerability defunkt	CVE Database V5	2026-10-04

Showing 1–1 of 1 result