← Database

CVE-2026-58440

MEDIUM CVSS: 6.8 Published: 2026-08-13 Modified: 2026-08-14

Description

Webhooks created by a collaborator keep firing after their repo access is revoked → ongoing real-time exfiltration of private repo content (incomplete revocation cleanup in `DeleteCollaboration`)

Affected Platforms

Unknown

Weakness Type

CWE-284

References