What is the official website of GitHub Education ?

The official website of GitHub Education is https://github.com/education.

What is GitHub Education's cybersecurity risk score?

GitHub Education has an AI-generated cybersecurity risk score of 757 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has GitHub Education experienced?

According to Rankiteo, GitHub Education currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has GitHub Education been affected by any supply chain cyber incidents ?

According to Rankiteo, GitHub Education has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Microsoft Security Response Center (Incident ID: POL1785356870) OpenAI (Incident ID: CHE1784787889) AsyncAPI Initiative (Incident ID: CISSONMICORAASYKNX1784341544) AsyncAPI Initiative (Incident ID: ASYMIC1785327908) Packagist Conductors (Incident ID: WHMPACGITCPA1784816835) ShapedPlugin LLC (Incident ID: FORSHATANMICJAMIRHTEX1782147825) PRODAFT (Incident ID: MICSENKASESECRO1782073479) GitHub (Incident ID: GIT1780453444) npm, Inc. (Incident ID: NPMGIT1779963893) npm, Inc. (Incident ID: ELAGITAMAOPENPM1780050263) ANTV INC (Incident ID: ANTGIT1779395279) Google (Incident ID: OPEMICBRAGOOVIVBRO1779395125) GitHub (Incident ID: GIT1779459975) Microsoft Security (Incident ID: PUTWEBANYMIC1779215753) NXP Semiconductors (Incident ID: NPMGITNXPMIC1779193496) TanStack (Incident ID: GRA1779006227) GitHub (Incident ID: GIT1779251025) GitHub (Incident ID: PHPGIT1778747372) GitHub (Incident ID: GOO1778567308) Anthropic (Incident ID: ANT1778581440) TanStack (Incident ID: MIS1778869722) Google AI (Incident ID: GITGOO1780431903) PyPI (Incident ID: PYPGIT1PA1778761827) GitHub (Incident ID: MICMICMICGIT1780813480) CodeRabbit (Incident ID: CODGIT1783765479) Citrix (Incident ID: MICTHESECCIT1785522270) Google (Incident ID: GITGOO1777302471) npm, Inc. (Incident ID: GITNPMASU1776918263) Bitwarden (Incident ID: BIT1776975830) Checkmarx (Incident ID: CHEDOCGIT1776961598)

Does GitHub Education have SOC 2 Type 1 certification ?

According to Rankiteo, GitHub Education is not certified under SOC 2 Type 1.

Does GitHub Education have SOC 2 Type 2 certification ?

According to Rankiteo, GitHub Education does not hold a SOC 2 Type 2 certification.

Does GitHub Education comply with GDPR ?

According to Rankiteo, GitHub Education is not listed as GDPR compliant.

Does GitHub Education have PCI DSS certification ?

According to Rankiteo, GitHub Education does not currently maintain PCI DSS compliance.

Does GitHub Education comply with HIPAA ?

According to Rankiteo, GitHub Education is not compliant with HIPAA regulations.

Does GitHub Education have ISO 27001 certification ?

According to Rankiteo,GitHub Education is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does GitHub Education operate in ?

GitHub Education operates primarily in the Software Development industry.

How many employees does GitHub Education have ?

GitHub Education employs approximately None employees people worldwide.

Does GitHub Education own any subsidiaries ?

GitHub Education presently has no subsidiaries across any sectors.

How many LinkedIn followers does GitHub Education have ?

GitHub Education's official LinkedIn profile has approximately 13,800 followers.

What is the NAICS classification code for GitHub Education ?

GitHub Education is classified under the NAICS code 5112, which corresponds to Software Publishers.

Does GitHub Education have a Crunchbase profile ?

No, GitHub Education does not have a profile on Crunchbase.

Does GitHub Education have a LinkedIn profile ?

Yes, GitHub Education maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/github-education.

How many cybersecurity incidents has GitHub Education experienced ?

As of August 10, 2026, Rankiteo reports that GitHub Education has experienced 100 cybersecurity incidents.

How many peer or competitor companies does GitHub Education have ?

GitHub Education has an estimated 30,595 peer or competitor companies worldwide.

What types of cybersecurity incidents has GitHub Education faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Vulnerability, Breach, Ransomware and Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

GitHub Education

Boost Score +25 with badge (5 left)

757

/1000

Fair

782

/1000

Fair

GitHub Education Vendor Cyber Rating & Cyber Score

github.com

Add Your Compliance Badge

GitHub Education bridges the gap between coding education and a tech career, and is accessible to everyone globally at no cost. With free resources like the Student Developer Pack, Teacher Toolbox, GitHub Copilot Pro and Codespaces, take your learning and teaching to a whole new level.

GitHub Education A.I CyberSecurity Scoring

Scoring History

GitHub Education

GitHub Education CyberSecurity News & History

Past Incidents

100

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

GitHub

Cyber Attack

8/2026

GIT1785839378

Microsoft Security ...

Vulnerability

100

7/2026

MIC1785392682

Microsoft Security ...

Breach

7/2026

Microsoft Secur...

POL1785356870

Microsoft Security

Vulnerability

7/2026

MIC1786107729

Microsoft Security

Cyber Attack

7/2026

MIC1784881741

Microsoft Security ...

Vulnerability

100

7/2026

OpenAI

CHE1784787889

Microsoft Security

Vulnerability

7/2026

MIC1784744777

Microsoft Security

Cyber Attack

7/2026

MIC1784658331

Microsoft Threat In...

Vulnerability

7/2026

MICNOVBRU178442...

Microsoft Security

Vulnerability

7/2026

MIC1784096635

Microsoft Security

Vulnerability

7/2026

AsyncAPI Initia...

CISSONMICORAASY...

Microsoft

Vulnerability

100

7/2026

MIC1784125827

Microsoft Security

Vulnerability

100

7/2026

MIC1784141218

Microsoft Security

Vulnerability

7/2026

MIC1784096831

Microsoft Threat In...

Cyber Attack

100

7/2026

AsyncAPI Initia...

ASYMIC178532790...

Microsoft

Vulnerability

7/2026

MIC1784089434

Microsoft Security ...

Vulnerability

7/2026

MIC1784298242

Microsoft

Vulnerability

7/2026

MIC1784816949

GitHub

Cyber Attack

100

7/2026

Packagist Condu...

WHMPACGITCPA178...

Microsoft Threat In...

Cyber Attack

100

7/2026

MIC1783680524

Microsoft Security ...

Vulnerability

100

7/2026

MIC1783441514

GitHub

Vulnerability

7/2026

GIT1783441439

Microsoft Security ...

Vulnerability

7/2026

MIC1783067043

Microsoft Security

Vulnerability

7/2026

MIC1786379301

Microsoft

Vulnerability

6/2026

MIC1782721445

Microsoft Security

Cyber Attack

6/2026

MIC1782483842

Microsoft Security

Cyber Attack

6/2026

MIC1782404840

Microsoft Security

Vulnerability

6/2026

MIC1782375843

Microsoft

Breach

6/2026

ANAMIC178542315...

Microsoft Security

Cyber Attack

6/2026

ShapedPlugin LL...

FORSHATANMICJAM...

Microsoft Security ...

Ransomware

100

6/2026

MIC1782204242

Microsoft Security

Cyber Attack

6/2026

PRODAFT

MICSENKASESECRO...

GitHub

Cyber Attack

6/2026

GIT1781778547

Microsoft Security

Vulnerability

6/2026

MIC1781785861

Microsoft Threat In...

Cyber Attack

6/2026

MIC1781713463

Microsoft Security ...

Vulnerability

6/2026

MIC1781238231

Microsoft Security

Cyber Attack

6/2026

SPOMICADO178120...

Microsoft Security ...

Vulnerability

6/2026

MIC1781072633

Microsoft Security ...

Vulnerability

6/2026

MIC1781101475

Microsoft Security ...

Vulnerability

6/2026

MIC1781785666

Microsoft Security

Vulnerability

6/2026

MIC1782296659

Microsoft

Cyber Attack

6/2026

MIC1780900177

Microsoft Security ...

Breach

6/2026

MIC1780986305

Microsoft Security ...

Vulnerability

6/2026

MIC1780640667

Microsoft 365

Vulnerability

6/2026

LINMIC178053984...

Microsoft Threat In...

Cyber Attack

6/2026

MICISR178456517...

GitHub

Vulnerability

100

6/2026

GitHub

GIT1780453444

Microsoft Security ...

Vulnerability

100

6/2026

MIC1784910234

Microsoft Security ...

Vulnerability

6/2026

MIC1781540872

Microsoft Security

Vulnerability

6/2026

MIC1781591215

Microsoft

Vulnerability

6/2026

MIC1781541072

Microsoft Visual St...

Vulnerability

6/2026

MIC1782398423

Microsoft Security ...

Vulnerability

100

6/2026

MIC1780287882

Microsoft Security

Cyber Attack

100

5/2026

OKTMICATTNVI178...

GitHub

Cyber Attack

5/2026

npm, Inc.

NPMGIT177996389...

GitHub

Cyber Attack

5/2026

npm, Inc.

ELAGITAMAOPENPM...

Microsoft Threat In...

Cyber Attack

5/2026

MIC1784291489

Microsoft Threat In...

Cyber Attack

100

5/2026

MIC1779704661

GitHub

Cyber Attack

100

5/2026

ANTV INC

ANTGIT177939527...

Microsoft Security ...

Vulnerability

5/2026

Google

OPEMICBRAGOOVIV...

Microsoft Security

Vulnerability

5/2026

MIC1779272687

Microsoft Security

Cyber Attack

5/2026

MIC1779258738

GitHub

Cyber Attack

5/2026

GIT1779179198

Microsoft Threat In...

Cyber Attack

100

5/2026

MIC1779164698

GitHub

Cyber Attack

100

5/2026

GitHub

GIT1779459975

Microsoft Security

Cyber Attack

5/2026

Microsoft Secur...

PUTWEBANYMIC177...

GitHub

Cyber Attack

5/2026

NXP Semiconduct...

NPMGITNXPMIC177...

GitHub

Breach

5/2026

TanStack

GRA1779006227

Microsoft Security ...

Vulnerability

5/2026

MIC1778833438

Microsoft Security ...

Vulnerability

100

5/2026

MIC1778732772

GitHub

Breach

5/2026

GitHub

GIT1779251025

GitHub

Vulnerability

5/2026

GitHub

PHPGIT177874737...

Microsoft Security

Vulnerability

5/2026

MIC1778682772

Microsoft Security

Vulnerability

5/2026

MIC1780475036

Microsoft Security ...

Vulnerability

100

5/2026

MIC1778747112

Microsoft Security

Vulnerability

5/2026

MIC1778646305

Microsoft Security ...

Vulnerability

5/2026

MIC1780511463

GitHub

Cyber Attack

100

5/2026

GitHub

GOO1778567308

Microsoft

Vulnerability

100

5/2026

MIC1778229035

GitHub

Vulnerability

5/2026

Anthropic

ANT1778581440

GitHub

Cyber Attack

5/2026

GIT1781001050

GitHub

Vulnerability

100

5/2026

ANTFOX7-ECARGIT...

GitHub

Breach

5/2026

TanStack

MIS1778869722

GitHub

Cyber Attack

5/2026

Google AI

GITGOO178043190...

GitHub

Cyber Attack

100

5/2026

PyPI

PYPGIT1PA177876...

Microsoft

Cyber Attack

100

5/2026

GitHub

MICMICMICGIT178...

GitHub

Cyber Attack

5/2026

CodeRabbit

CODGIT178376547...

Microsoft Threat In...

Vulnerability

100

5/2026

Citrix

MICTHESECCIT178...

Microsoft Threat In...

Cyber Attack

5/2026

MIC1785803042

Microsoft Security

Vulnerability

100

4/2026

LINCISMIC177793...

GitHub

Vulnerability

100

4/2026

GITCPAADTROB177...

Microsoft Security

Vulnerability

4/2026

MICFED177746571...

Microsoft

Vulnerability

4/2026

GOOMICMED177765...

GitHub

Vulnerability

4/2026

Google

GITGOO177730247...

Microsoft Security ...

Vulnerability

100

4/2026

MIC1777141431

Microsoft Security

Cyber Attack

100

4/2026

MIC1777019139

GitHub

Cyber Attack

4/2026

npm, Inc.

GITNPMASU177691...

GitHub

Cyber Attack

4/2026

Bitwarden

BIT1776975830

Microsoft

Vulnerability

4/2026

MIC1776839097

GitHub

Cyber Attack

100

4/2026

Checkmarx

CHEDOCGIT177696...

Loading…

A.I.

GitHub Education Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for GitHub Education

Incidents vs Software Development Industry Avg (This Year)

No incidents recorded for GitHub Education in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for GitHub Education in 2026.

Incident Types GitHub Education vs Software Development Industry Avg (This Year)

No incidents recorded for GitHub Education in 2026.

Incident History - GitHub Education (X = Date, Y = Severity)

Loading…

SUBSIDIARY

GitHub Education Subsidiaries

GitHub Education

Software Development

Website: https://github.com/education

Company Size: 1,001-5,000 employees

GitHubSoftware Development

GitHub LATAMSoftware Development

GitHub BrasilSoftware Development

MicrosoftSoftware Development

Microsoft CloudSoftware Development

Microsoft SecurityIT Services and IT Consulting

Microsoft LearnIT Services and IT Consulting

Microsoft AzureTechnology, Information and Internet

Microsoft DeveloperSoftware Development

Microsoft ResearchThink Tanks

Microsoft 365IT Services and IT Consulting

Microsoft Visual StudioSoftware Development

Microsoft AI Cloud Partner ProgramInformation Technology & Services

Microsoft SQL ServerSoftware Development

Microsoft On the IssuesTechnology, Information and Internet

Microsoft SurfaceComputer Hardware

Microsoft Dynamics 365Software Development

343 IndustriesComputer Games

Microsoft FabricData Infrastructure and Analytics

Microsoft in GovernmentSoftware Development

M12, Microsoft's Venture FundVenture Capital and Private Equity Principals

Microsoft AdvertisingAdvertising Services

Microsoft 365 Insider ProgramSoftware Development

Microsoft for HealthcareSoftware Development

Microsoft Power PlatformSoftware Development

Microsoft VivaSoftware Development

Microsoft Threat IntelligenceComputer and Network Security

FlipE-Learning Providers

VidkuIT Services and IT Consulting

Microsoft ReactorTechnology, Information and Internet

Microsoft WindowsSoftware Development

Microsoft AIDesarrollo de software

Microsoft 365 DeveloperTechnology, Information and Internet

Microsoft for NonprofitsSoftware Development

Microsoft Military AffairsInformation Technology & Services

Studios Quality - Xbox Game StudiosComputer Games

Metaswitch NetworksTelecommunications

Microsoft Security Response CenterComputer and Network Security

MSoftware Development

Halo StudiosComputer Games

Microsoft Most Valuable ProfessionalsTechnology, Information and Internet

Microsoft's Entrepreneurship for Positive ImpactSoftware Development

Go China ConnectionIT 服务与咨询

XboxEntertainment Providers

Microsoft News and StoriesTechnology, Information and Internet

Microsoft CopilotSoftware Development

Visual Studio CodeSoftware Development

Microsoft EventsTechnology, Information and Internet

Microsoft Most Valued ProfessionalSoftware Development

Loading…

GitHub Education Similar Companies

VMware

broadcom.com

Broadcom's VMware software manages cloud complexity so customers can modernize infrastructure, accelerate app development, and protect workloads, wherever these reside. Our flagship cloud solutions provide the security and performance of private cloud combined with the scale and agility of public cloud. Modern app, edge infrastructure, and private AI products extend these capabilities, while security and disaster recovery help ensure that customers’ operations continue uninterrupted. From the data center to the cloud and apps to the edge, we help enterprises around the globe become more innovative, connected, resilient and secure.

linkedin.com

Founded in 2003, LinkedIn connects the world's professionals to make them more productive and successful. With more than 1 billion members worldwide, including executives from every Fortune 500 company, LinkedIn is the world's largest professional network. The company has a diversified business model with revenue coming from Talent Solutions, Marketing Solutions, Sales Solutions and Premium Subscriptions products. Headquartered in Silicon Valley, LinkedIn has offices across the globe.

Bosch

cb bosch.com

The Bosch Group is a leading global supplier of technology and services. It employs roughly 417,900 associates worldwide (as of December 31, 2024). According to preliminary figures, the company generated sales of 90.5 billion euros in 2024. Its operations are divided into four business sectors: Mobility, Industrial Technology, Consumer Goods, and Energy and Building Technology. With its business activities, the company aims to use technology to help shape universal trends such as automation, electrification, digitalization, connectivity, and an orientation to sustainability. In this context, Bosch’s broad diversification across regions and industries strengthens its innovativeness and robustness. Bosch uses its proven expertise in sensor technology, software, and services to offer customers cross-domain solutions from a single source. It also applies its expertise in connectivity and artificial intelligence in order to develop and manufacture user-friendly, sustainable products. With technology that is “Invented for life,” Bosch wants to help improve quality of life and conserve natural resources. The Bosch Group comprises Robert Bosch GmbH and its roughly 470 subsidiary and regional companies in over 60 countries. Including sales and service partners, Bosch’s global manufacturing, engineering, and sales network covers nearly every country in the world. Bosch’s innovative strength is key to the company’s further development. At 136 locations across the globe, Bosch employs some 86,900 associates in research and development, of which nearly 48,000 are software engineers. Instagram: https://www.instagram.com/boschglobal/ Facebook: https://www.facebook.com/BoschGlobal Glassdoor: https://bit.ly/3raTZnH Imprint: www.bosch.com/corporate-information Privacy statement: https://www.bosch.com/data-protection-notice-bosch-linkedin/

Synopsys Inc

cb synopsys.com

Synopsys is the leader in engineering solutions from silicon to systems, enabling customers to rapidly innovate AI-powered products. We deliver industry-leading silicon design, IP, simulation and analysis solutions, and design services. We partner closely with our customers across a wide range of industries to maximize their R&D capability and productivity, powering innovation today that ignites the ingenuity of tomorrow.

Expedia Group

expediagroup.com

At Expedia Group (NASDAQ: EXPE), we believe travel is a force for good – it opens minds, builds connections, and bridges divides. We create transformative tech that enables unforgettable experiences for all travelers, everywhere. Our trusted family of brands are known and loved by millions, and we power more trips than anyone else. To learn more about our vision of a more open world through travel, visit www.expediagroup.com. We’re committed to providing an inclusive and accessible recruiting experience for candidates with disabilities, or other physical or mental health conditions. If you require an accommodation or adjustment for any part of the application or recruitment process, please let us know by completing our Accommodation Request Form or contacting your recruiter. Employment opportunities and job offers at Expedia Group will always come from Expedia Group’s Talent Acquisition and hiring teams. Never provide sensitive, personal information to someone unless you’re confident about who they are. We do not send job offers via email, or any other messaging tools, to individuals we have not had prior contact with. Our email domain is @expediagroup.com. Our official careers website, where you can to find and apply for job openings, is careers.expediagroup.com/jobs. If you require customer service support to cancel, change or ask about a refund for your trip, you can connect with our 24/7 Virtual Agent through the following links: Expedia: https://www.expedia.com/helpcenter Hotels.com: https://service.hotels.com/en-us/ Vrbo: https://help.vrbo.com/ For additional assistance, direct message us on Twitter @ExpediaHelp with your itinerary number and email address: https://twitter.com/ExpediaHelp

Upwork

cb upwork.com

Upwork is the world’s work marketplace that connects businesses with independent talent from across the globe. We serve everyone from one-person startups to large, Fortune 100 enterprises with a powerful, trust-driven platform that enables companies and talent to work together in new ways that unlock their potential. Our talent community on Upwork encompasses more than 10,000 skills in categories including website & app development, creative & design, customer support, finance & accounting, consulting, and operations.

Grab

grab.careers

Grab is Southeast Asia’s leading superapp, offering a suite of services consisting of deliveries, mobility, financial services, enterprise and others. Grabbers come from all over the world, and we are united by a common mission: to drive Southeast Asia forward by creating economic empowerment for everyone. At Grab, every Grabber is guided by The Grab Way, which explains our mission and the operating principles on how we can achieve it together. We call these principles the 4Hs: Heart We work together as OneGrab to serve communities in Southeast Asia Hunger We work to understand ground truths and drive improvements, big and small Honour We keep our word and steward our resources wisely to build and sustain trust Humility We are a constant work-in-progress, and we never stop learning to get better

Dassault Systèmes

3ds.com

Dassault Systèmes is a catalyst for human progress. Since 1981, the company has pioneered virtual worlds to improve real life for consumers, patients and citizens. With Dassault Systèmes’ 3DEXPERIENCE platform, 370,000 customers of all sizes, in all industries, can collaborate, imagine and create sustainable innovations that drive meaningful impact. For more information, visit: https://www.3ds.com

IDEMIA

cb idemia.com

IDEMIA Secure Transactions (IST) is a leading provider of payment, connectivity, and cybersecurity solutions, serving billions of people worldwide. With decades of expertise in cryptography and credential issuance, IST is trusted by over 2000 financial institutions, mobile operators, automotive manufacturers, and IoT providers worldwide. IST is a division of IDEMIA Group. IDEMIA Public Security, another division of IDEMIA Group, is the premium provider of convenient and trusted biometric-based solutions, transforming public and private organizations across the globe. Follow them here: https://www.linkedin.com/company/idemia-public-security/

Loading…

NEWS

GitHub Education CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 13, 2026 07:09 PM

GitHub infuriates students by removing some models from free Copilot plan

You don't get what you don't pay for! Microsoft's GitHub is dialing back on expenses by removing several costly premium models from its free...

Read Article

March 02, 2026 08:00 AM

Top Cyber Security Projects to Build Skills and Portfolio

TL;DR: This article lists top cybersecurity project ideas for beginners, intermediates, and experts, along with project repos and starter...

Read Article

February 18, 2026 07:27 AM

Malicious Triton App Fork Emerges On GitHub, Posing Threat To Cybersecurity

A recent discovery on GitHub has raised alarms in the cybersecurity community, as a malicious fork of the legitimate macOS app Triton has.

Read Article

February 17, 2026 08:00 AM

Malware in the Wild as Malicious Fork of Legitimate Triton App Surfaces on GitHub

A fake Triton macOS fork on GitHub redirected users to a ZIP with Windows malware hidden in an Xcode colorset folder.

Read Article

January 30, 2026 08:00 AM

India's Developer Boom: Building the Future with AI and Innovation

India's developer community has reached an inflection point. With 17 million developers on GitHub, growing at 28% YoY in 2024, the country...

Read Article

December 15, 2025 08:00 AM

Think Like an Attacker: Cybersecurity Tips From a Security Strategist

Etay Mayor shares his journey, insights, and advice on breaking into the diverse and ever-evolving field of cybersecurity.

Read Article

December 10, 2025 08:00 AM

Did your npm pipeline break today? Check your ‘classic’ tokens

A spate of supply chain attacks forces GitHub's npm to revoke 'classic' tokens. Despite this, larger worries about developer account...

Read Article

November 25, 2025 08:00 AM

Popular code formatting sites are exposing credentials and other secrets

Widely used code formatting sites JSONFormatter and CodeBeautify are exposing sensitive credentials, API keys, private keys,...

Read Article

November 24, 2025 10:09 AM

How GitHub Became the Operating System for Modern Engineering

I. Introduction: The Quiet Revolution. Let's be honest. For years, Git was seen as that necessary, slightly tedious command-line tool we used to avoid...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-19374

SUMMARY

A security vulnerability has been detected in adafap api-mcp up to 92b9a5d04acfec165c7d4ef852496593aa87be06. This affects the function customAxios of the file app/api/proxy/route.ts of the component Proxy API Endpoint. The manipulation of the argument url leads to server-side request forgery. The attack is possible to be carried out remotely. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 5.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

CVE-2026-19373

SUMMARY

A weakness has been identified in PhialsBasement KoboldCPP-MCP-Server 1.0.0. Affected by this issue is the function makeRequest of the file src/index.ts of the component BaseConfigSchema. Executing a manipulation of the argument apiUrl can lead to server-side request forgery. It is possible to launch the attack on the local host. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-19372

SUMMARY

A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability is the function fs.readFileSync of the file src/index.ts of the component upload_document. Performing a manipulation of the argument File results in path traversal. Attacking locally is a requirement. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-19371

SUMMARY

A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0. Affected is the function copyFileSync of the file src/tools/utils.ts of the component comfy_upload_image. Such manipulation of the argument image_path leads to path traversal. An attack has to be approached locally. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-12372

SUMMARY

A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch. The `nltk.pathsec.validate_network_url()` function, intended to prevent SSRF by rejecting internal network addresses, fails to reject IPs in the RFC 6598 shared address space (`100.64.0.0/10`). This occurs because Python's `ipaddress` module does not classify such addresses as `is_private` or `is_global`, and the current guard only checks `is_private` and a few explicit categories. An attacker who can influence a URL passed to NLTK's network-loading helpers can exploit this vulnerability to make a strict-mode application send requests to shared-address-space hosts, potentially exposing non-public infrastructure reachable from the application host. The impact is limited to SSRF-style confidentiality exposure, with no code execution claimed.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 3.7)

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Impact Score

1.4

Exploitability

2.2

REFERENCES

https://huntr.com/bounties/2911b643-571c-42e4-b0c2-9a1fa6f491db

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…