https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-19T23:22:04.515520+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-112050 fkie_cve-2026-112050 2026-10-19T23:22:04.539698+00:00

Gitify before 7.10.0 contains a login cross-site request forgery vulnerability that allows remote attackers to bind a victim's client to their account because performGitHubWebOAuth() omits OAuth state validation. Attackers can get a gitify://oauth?code= link with their own authorization code opened during a victim's pending login, causing Gitify to display attacker-controlled notifications as the victim's own.

 https://db.gcve.eu/vuln/ghsa-gh5g-g72j-mxwx GHSA-gh5g-g72j-mxwx 2026-10-19T23:22:04.539789+00:00

Gitify before 7.10.0 contains a login cross-site request forgery vulnerability that allows remote attackers to bind a victim's client to their account because performGitHubWebOAuth() omits OAuth state validation. Attackers can get a gitify://oauth?code= link with their own authorization code opened during a victim's pending login, causing Gitify to display attacker-controlled notifications as the victim's own.