What is the official website of GitHub Security Lab ?

The official website of GitHub Security Lab is https://securitylab.github.com.

What is GitHub Security Lab's cybersecurity risk score?

GitHub Security Lab has an AI-generated cybersecurity risk score of 717 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has GitHub Security Lab experienced?

According to Rankiteo, GitHub Security Lab currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has GitHub Security Lab been affected by any supply chain cyber incidents ?

According to Rankiteo, GitHub Security Lab has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: MLflow (Incident ID: MLF1787063064) Resecurity (Incident ID: CISRESMICAMASERSALGIT1786868753) Microsoft (Incident ID: HCLTAT1786448292) Microsoft Power Platform (Incident ID: MICATL1786962683) Microsoft Dynamics 365 (Incident ID: ALL1785522998) Microsoft Security Response Center (Incident ID: POL1785356870) Microsoft (Incident ID: KIE1787783299) OpenAI (Incident ID: CHE1784787889) AsyncAPI Initiative (Incident ID: CISSONMICORAASYKNX1784341544) AsyncAPI Initiative (Incident ID: ASYMIC1785327908) Packagist Conductors (Incident ID: WHMPACGITCPA1784816835) ShapedPlugin LLC (Incident ID: FORSHATANMICJAMIRHTEX1782147825) PRODAFT (Incident ID: MICSENKASESECRO1782073479) GitHub (Incident ID: SNOGIT1787203094) npm, Inc. (Incident ID: GITEXONPM1780604646) GitHub (Incident ID: GIT1780453444) npm, Inc. (Incident ID: ELAGITAMAOPENPM1780050263) npm, Inc. (Incident ID: NPMGIT1779963893) ANTV INC (Incident ID: ANTGIT1779395279) Google (Incident ID: OPEMICBRAGOOVIVBRO1779395125) NXP Semiconductors (Incident ID: NPMGITNXPMIC1779193496) GitHub (Incident ID: GIT1779459975) Microsoft Security (Incident ID: PUTWEBANYMIC1779215753) TanStack (Incident ID: GRA1779006227) GitHub (Incident ID: GIT1779251025)

Does GitHub Security Lab have SOC 2 Type 1 certification ?

According to Rankiteo, GitHub Security Lab is not certified under SOC 2 Type 1.

Does GitHub Security Lab have SOC 2 Type 2 certification ?

According to Rankiteo, GitHub Security Lab does not hold a SOC 2 Type 2 certification.

Does GitHub Security Lab comply with GDPR ?

According to Rankiteo, GitHub Security Lab is not listed as GDPR compliant.

Does GitHub Security Lab have PCI DSS certification ?

According to Rankiteo, GitHub Security Lab does not currently maintain PCI DSS compliance.

Does GitHub Security Lab comply with HIPAA ?

According to Rankiteo, GitHub Security Lab is not compliant with HIPAA regulations.

Does GitHub Security Lab have ISO 27001 certification ?

According to Rankiteo,GitHub Security Lab is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does GitHub Security Lab operate in ?

GitHub Security Lab operates primarily in the Software Development industry.

How many employees does GitHub Security Lab have ?

GitHub Security Lab employs approximately None employees people worldwide.

Does GitHub Security Lab own any subsidiaries ?

GitHub Security Lab presently has no subsidiaries across any sectors.

How many LinkedIn followers does GitHub Security Lab have ?

GitHub Security Lab's official LinkedIn profile has approximately 6,371 followers.

What is the NAICS classification code for GitHub Security Lab ?

GitHub Security Lab is classified under the NAICS code 5112, which corresponds to Software Publishers.

Does GitHub Security Lab have a Crunchbase profile ?

No, GitHub Security Lab does not have a profile on Crunchbase.

Does GitHub Security Lab have a LinkedIn profile ?

Yes, GitHub Security Lab maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/github-securitylab.

How many cybersecurity incidents has GitHub Security Lab experienced ?

As of August 28, 2026, Rankiteo reports that GitHub Security Lab has experienced 100 cybersecurity incidents.

How many peer or competitor companies does GitHub Security Lab have ?

GitHub Security Lab has an estimated 30,744 peer or competitor companies worldwide.

What types of cybersecurity incidents has GitHub Security Lab faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Vulnerability, Cyber Attack, Breach and Ransomware.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

GSL

Boost Score +25 with badge (5 left)

717

/1000

Moderate

742

/1000

Moderate

GitHub Security Lab Vendor Cyber Rating & Cyber Score

github.com

Add Your Compliance Badge

GSL A.I CyberSecurity Scoring

Scoring History

GSL

GitHub Security Lab CyberSecurity News & History

Past Incidents

100

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Microsoft Security

Vulnerability

8/2026

MIC1787898427

Microsoft Security ...

Vulnerability

100

8/2026

MIC1787847949

Microsoft

Vulnerability

8/2026

MIC1787826520

GitHub

Breach

8/2026

TELGITSTROPE178...

GitHub

Cyber Attack

100

8/2026

MCDCITSHEVODVER...

Microsoft Security

Breach

8/2026

MICVODSAF178747...

Microsoft

Vulnerability

100

8/2026

MIC1787156632

Microsoft Copilot

Vulnerability

8/2026

GOOMIC178711351...

Microsoft Security ...

Vulnerability

100

8/2026

MIC1787034406

Microsoft Security

Vulnerability

8/2026

MIC1787149631

Microsoft Security ...

Vulnerability

100

8/2026

MIC1787163871

Microsoft

Vulnerability

100

8/2026

MLflow

MLF1787063064

GitHub

Cyber Attack

8/2026

GIT1786969496

Microsoft Security

Breach

8/2026

Resecurity

CISRESMICAMASER...

Microsoft

Vulnerability

100

8/2026

MICSAP178649758...

Microsoft Threat In...

Cyber Attack

100

8/2026

MIC1786568300

Microsoft Security ...

Vulnerability

100

8/2026

MIC1787733576

Microsoft Security ...

Vulnerability

8/2026

MIC1786620445

Microsoft Security

Vulnerability

8/2026

MIC1786525732

Microsoft Security

Vulnerability

8/2026

MIC1786631229

Microsoft

Breach

8/2026

Microsoft

HCLTAT178644829...

Microsoft Power Pla...

Vulnerability

100

8/2026

Microsoft Power...

MICATL178696268...

GitHub

Cyber Attack

8/2026

GIT1785839378

Microsoft Security ...

Vulnerability

100

7/2026

MIC1785392682

Microsoft Dynamics ...

Ransomware

100

7/2026

Microsoft Dynam...

ALL1785522998

Microsoft Security ...

Breach

7/2026

Microsoft Secur...

POL1785356870

Microsoft Security

Vulnerability

7/2026

MIC1786107729

Microsoft

Breach

7/2026

Microsoft

KIE1787783299

Microsoft Security

Cyber Attack

7/2026

MIC1784881741

Microsoft Security

Vulnerability

7/2026

MIC1784744777

Microsoft Security ...

Vulnerability

100

7/2026

OpenAI

CHE1784787889

Microsoft Security

Cyber Attack

7/2026

MIC1784658331

Microsoft Threat In...

Vulnerability

7/2026

MICNOVBRU178442...

Microsoft Security

Vulnerability

7/2026

AsyncAPI Initia...

CISSONMICORAASY...

Microsoft

Vulnerability

100

7/2026

MIC1784125827

Microsoft Security

Vulnerability

7/2026

MIC1784096635

Microsoft Security

Vulnerability

7/2026

MIC1784096831

Microsoft Security ...

Vulnerability

7/2026

MIC1784298242

Microsoft

Vulnerability

7/2026

MIC1784816949

Microsoft

Vulnerability

7/2026

MIC1784089434

Microsoft Security

Vulnerability

100

7/2026

MIC1784141218

Microsoft Threat In...

Cyber Attack

100

7/2026

AsyncAPI Initia...

ASYMIC178532790...

GitHub

Cyber Attack

100

7/2026

Packagist Condu...

WHMPACGITCPA178...

Microsoft Threat In...

Cyber Attack

100

7/2026

MIC1783680524

Microsoft Security ...

Vulnerability

100

7/2026

MIC1783441514

GitHub

Vulnerability

7/2026

GIT1783441439

Microsoft Security ...

Vulnerability

7/2026

MIC1783067043

Microsoft Security

Ransomware

100

7/2026

MIC1787041566

Microsoft Security

Vulnerability

7/2026

MIC1786379301

Microsoft

Vulnerability

6/2026

MIC1782721445

Microsoft Security

Cyber Attack

6/2026

MIC1782483842

Microsoft Security

Vulnerability

6/2026

MIC1782375843

Microsoft Security

Cyber Attack

6/2026

MIC1782404840

Microsoft

Breach

6/2026

ANAMIC178542315...

Microsoft Security

Cyber Attack

6/2026

ShapedPlugin LL...

FORSHATANMICJAM...

Microsoft Security ...

Ransomware

100

6/2026

MIC1782204242

Microsoft Security

Cyber Attack

6/2026

PRODAFT

MICSENKASESECRO...

GitHub

Cyber Attack

6/2026

GIT1781778547

Microsoft Security

Vulnerability

6/2026

MIC1781785861

GitHub

Vulnerability

6/2026

GitHub

SNOGIT178720309...

Microsoft Threat In...

Cyber Attack

6/2026

MIC1781713463

Microsoft Security ...

Vulnerability

6/2026

MIC1781238231

Microsoft Security

Cyber Attack

6/2026

SPOMICADO178120...

Microsoft Security

Vulnerability

6/2026

MIC1782296659

Microsoft Security ...

Vulnerability

6/2026

MIC1781101475

Microsoft Security ...

Vulnerability

6/2026

MIC1781072633

Microsoft Security ...

Vulnerability

6/2026

MIC1781785666

Microsoft Security ...

Breach

6/2026

MIC1780986305

Microsoft

Cyber Attack

6/2026

MIC1780900177

Microsoft Security ...

Vulnerability

6/2026

MIC1780640667

Microsoft 365

Vulnerability

6/2026

LINMIC178053984...

GitHub Security Lab

Cyber Attack

6/2026

npm, Inc.

GITEXONPM178060...

Microsoft Threat In...

Cyber Attack

6/2026

MICISR178456517...

GitHub

Vulnerability

100

6/2026

GitHub

GIT1780453444

Microsoft Security ...

Vulnerability

100

6/2026

MIC1780287882

Microsoft Security

Vulnerability

6/2026

MIC1781591215

Microsoft Security ...

Vulnerability

100

6/2026

MIC1784910234

Microsoft

Vulnerability

6/2026

MIC1781541072

Microsoft Visual St...

Vulnerability

6/2026

MIC1782398423

Microsoft Security ...

Vulnerability

6/2026

MIC1781540872

Microsoft Security

Cyber Attack

100

5/2026

OKTMICATTNVI178...

GitHub

Cyber Attack

5/2026

npm, Inc.

ELAGITAMAOPENPM...

GitHub

Cyber Attack

5/2026

npm, Inc.

NPMGIT177996389...

Microsoft Threat In...

Cyber Attack

5/2026

MIC1784291489

Microsoft Threat In...

Cyber Attack

100

5/2026

MIC1779704661

Microsoft Security

Vulnerability

100

5/2026

MIC1786969594

GitHub

Cyber Attack

100

5/2026

ANTV INC

ANTGIT177939527...

Microsoft Security

Cyber Attack

5/2026

MIC1779258738

Microsoft Security

Vulnerability

5/2026

MIC1779272687

Microsoft Security ...

Vulnerability

5/2026

Google

OPEMICBRAGOOVIV...

GitHub

Cyber Attack

5/2026

GIT1779179198

GitHub

Cyber Attack

5/2026

NXP Semiconduct...

NPMGITNXPMIC177...

GitHub

Cyber Attack

100

5/2026

GitHub

GIT1779459975

Microsoft Threat In...

Cyber Attack

100

5/2026

MIC1779164698

Microsoft Security

Cyber Attack

5/2026

Microsoft Secur...

PUTWEBANYMIC177...

GitHub

Breach

5/2026

TanStack

GRA1779006227

Microsoft Security ...

Vulnerability

5/2026

MIC1778833438

Microsoft Security ...

Vulnerability

100

5/2026

MIC1778732772

GitHub

Breach

5/2026

GitHub

GIT1779251025

Microsoft Security

Vulnerability

5/2026

MIC1778682772

Loading…

A.I.

GSL Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for GSL

Incidents vs Software Development Industry Avg (This Year)

GitHub Security Lab has 88.68% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

GitHub Security Lab has 94.17% more incidents than the average of all companies with at least one recorded incident.

Incident Types GSL vs Software Development Industry Avg (This Year)

GitHub Security Lab reported 2 incidents this year: 2 cyber attacks, 0 ransomware, 0 vulnerabilities, 0 data breaches, compared to industry peers with at least 1 incident.

Incident History - GSL (X = Date, Y = Severity)

Loading…

SUBSIDIARY

GitHub Security Lab Subsidiaries

GSL

Software Development

Website: https://securitylab.github.com

Company Size: None employees

MicrosoftSoftware Development

Microsoft AdvertisingAdvertising Services

Microsoft AISoftware Development

Microsoft Learn Student AmbassadorsTechnology, Information and Internet

Studios Quality - Xbox Game StudiosComputer Games

M12, Microsoft's Venture FundVenture Capital and Private Equity Principals

Halo StudiosComputer Games

FlipE-Learning Providers

VidkuIT Services and IT Consulting

Microsoft VivaSoftware Development

Microsoft CloudSoftware Development

Microsoft LearnIT Services and IT Consulting

Microsoft CopilotSoftware Development

Microsoft SecurityIT Services and IT Consulting

Microsoft Threat IntelligenceComputer and Network Security

Microsoft DeveloperSoftware Development

Metaswitch NetworksTelecommunications

Halo StudiosComputer Games

Microsoft AI Cloud Partner ProgramInformation Technology & Services

Microsoft FabricData Infrastructure and Analytics

Microsoft ReactorTechnology, Information and Internet

Microsoft SurfaceComputer Hardware

Microsoft for NonprofitsSoftware Development

Microsoft 365 DeveloperTechnology, Information and Internet

Microsoft AccessibilityTechnology, Information and Internet

Microsoft SQL ServerSoftware Development

Microsoft 365 Insider ProgramSoftware Development

Microsoft WindowsSoftware Development

Microsoft 365IT Services and IT Consulting

Microsoft Security Response CenterComputer and Network Security

Microsoft in BusinessTechnology, Information and Media

Microsoft Power PlatformSoftware Development

Microsoft's Entrepreneurship for Positive ImpactSoftware Development

Visual Studio CodeSoftware Development

Microsoft On the IssuesTechnology, Information and Internet

XboxEntertainment Providers

Microsoft for HealthcareSoftware Development

Microsoft ResearchThink Tanks

Microsoft News and StoriesTechnology, Information and Internet

Microsoft EventsTechnology, Information and Internet

MSoftware Development

Microsoft in GovernmentSoftware Development

Microsoft Visual StudioSoftware Development

Microsoft DesignTechnology, Information and Internet

Microsoft Dynamics 365Software Development

Microsoft AzureTechnology, Information and Internet

Microsoft Military AffairsInformation Technology & Services

Go China ConnectionIT Services and IT Consulting

GitHubSoftware Development

GitHub EducationSoftware Development

GitHub LATAMSoftware Development

GitHub BrasilSoftware Development

Loading…

GitHub Security Lab Similar Companies

Grab

grab.careers

Grab is Southeast Asia’s leading superapp, offering a suite of services consisting of deliveries, mobility, financial services, enterprise and others. Grabbers come from all over the world, and we are united by a common mission: to drive Southeast Asia forward by creating economic empowerment for everyone. At Grab, every Grabber is guided by The Grab Way, which explains our mission and the operating principles on how we can achieve it together. We call these principles the 4Hs: Heart We work together as OneGrab to serve communities in Southeast Asia Hunger We work to understand ground truths and drive improvements, big and small Honour We keep our word and steward our resources wisely to build and sustain trust Humility We are a constant work-in-progress, and we never stop learning to get better

PedidosYa

pedidosya.com

We’re the delivery market leader in Latin America. Our platform connects over 77.000 restaurants, supermarkets, pharmacies and stores with millions of users. Nowadays we operate in more than 500 cities in Latinamerica. And we are now over 3.400 employees. PedidosYa is available for iOS, Android and Windows Phone operating systems and downloads are now over 20 million.

Rakuten

cb rakuten.com

Rakuten Group, Inc. (TSE: 4755) is a global technology leader in services that empower individuals, communities, businesses and society. Founded in Tokyo in 1997 as an online marketplace, Rakuten has expanded to offer services in e-commerce, fintech, digital content and communications to 2 billion members around the world. The Rakuten Group has more than 30,000 employees, and operations in 30 countries and regions. For more information visit https://global.rakuten.com/corp/.

Avaya

cb tinyurl.com

At Avaya, we give our customers the freedom to take their business in the directions that benefit them most. We provide the paths for both customers and their employees where every moment big and small can drive in the moment, memorable experiences. The journey is theirs at the pace that makes sense for them with the innovation without disruption they need now and the solutions they can invest in the future.

Xiaomi Technology

mi.com

Xiaomi Corporation was founded in April 2010 and listed on the Main Board of the Hong Kong Stock Exchange on July 9, 2018 (1810.HK). Xiaomi is a consumer electronics and smart manufacturing company with smartphones and smart hardware connected by an IoT platform at its core. Embracing our vision of “Make friends with users and be the coolest company in the users’ hearts”, Xiaomi continuously pursues innovations, high-quality user experience and operational efficiency. The company relentlessly builds amazing products with honest prices to let everyone in the world enjoy a better life through innovative technology. Xiaomi is one of the world's leading smartphone companies. In December 2025, global monthly active users ( "MAU") reached 754.1 million. The company has also established the world’s leading consumer AIoT (AI+IoT) platform, reached 1079.2 million smart devices connected to its platform (excluding smartphones, laptops and tablets) as of December 31, 2025. Xiaomi products are present in more than 100 countries and regions around the world. In July 2025, Xiaomi was included in the Fortune Global 500 list for the seventh year in a row. Xiaomi is a constituent of the Hang Seng Index, Hang Seng China Enterprises Index, Hang Seng TECH Index and Hang Seng China 50 Index.

Red Hat

redhat.com

Red Hat is the world’s leading provider of enterprise open source solutions, using a community-powered approach to deliver high-performing Linux, hybrid cloud, edge, and Kubernetes technologies. We hire creative, passionate people who are ready to contribute their ideas, help solve complex problems, and make an impact. Opportunities are open. Join us.

Epic

epic.com

Join us in our mission to help the world get well, help the world stay well, and help future generations be healthier. We hire smart and motivated people from all academic majors to code, test, and implement healthcare software that hundreds of millions of patients and doctors rely on to improve care and ultimately save lives around the globe. No healthcare experience is necessary; we'll train you to be an expert in health IT and we'll provide you with personal development classes to grow as a professional. Our expectations for you are high, but in healthcare so are the stakes.

Amazon Fulfillment Technologies & Robotics

amazon.jobs

On the Fulfillment Technologies & Robotics Team, we build dynamic partnerships between people and intelligent machines. This intricate collaboration helps Amazon fulfill orders with unmatched accuracy. Since we began working with robotics, we've added over a million new jobs worldwide. Working in symphony with our robotic technology, employees have the opportunity to extend their technical capabilities by working alongside some of the industry’s most advanced technologies. This includes our fleet of autonomous mobile robots, sophisticated control software, and technologies like language perception, machine learning, object recognition, and semantic understanding of commands. These technologies help employees deliver an ever-improving customer and employee experience, as well as improve the safety of our facilities. Explore opportunities across the entire Fulfillment Technologies & Robotics team to find the right fit for you.

Intuit

intuit.com

Intuit is a global technology platform that helps our customers and communities overcome their most important financial challenges. Serving millions of customers worldwide with TurboTax, QuickBooks, Credit Karma and Mailchimp, we believe that everyone should have the opportunity to prosper and we work tirelessly to find new, innovative ways to deliver on this belief. We encourage conversations on this page and will not delete comments that follow our terms of use. In order to keep this a safe community, the below posts may be removed: Repeated posts of the same content, spam or posts from fake accounts or profiles, offensive language or material, threats to others in the community, posts deliberately aimed to have a negative effect on the community or conversations.

Loading…

NEWS

GitHub Security Lab CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 02, 2026 08:00 AM

Top Cyber Security Projects to Build Skills and Portfolio

Build a standout portfolio with cyber security projects you can finish and document. Get ideas by level and guidance on choosing projects...

Read Article

February 17, 2026 08:00 AM

Securing the AI software supply chain: Security results across 67 open source projects

The GitHub Secure Open Source Fund helped 67 critical AI‑stack projects accelerate fixes, strengthen ecosystems, and advance open source...

Read Article

January 20, 2026 08:00 AM

AI-supported vulnerability triage with the GitHub Security Lab Taskflow Agent

Learn how we are using the newly released GitHub Security Lab Taskflow Agent to triage categories of vulnerabilities.

Read Article

December 12, 2025 08:00 AM

New PyStoreRAT Malware Targets OSINT Researchers Through GitHub

A new malware called PyStoreRAT is being through fake OSINT tools on GitHub targeting IT and OSINT pros. Read Morphisec's report detailing...

Read Article

October 30, 2025 07:00 AM

Google Releases Chrome 142 with Patches for 20 High-Severity Vulnerabilities

Google has officially released Chrome 142 to the stable channel, delivering critical security updates across Windows, Mac,...

Read Article

October 30, 2025 07:00 AM

Chrome 142 Released With Fix for 20 Vulnerabilities that Allows Malicious Code Execution

Google has officially promoted Chrome 142 to the stable channel, delivering critical security updates for Windows, Mac, and Linux users.

Read Article

October 30, 2025 07:00 AM

Chrome 142 Update Patches 20 Security Flaws Enabling Code Execution

Google has released Chrome version 142 to the stable channel, multiple vulnerabilities that could allow attackers to execute malicious code.

Read Article

October 22, 2025 07:00 AM

Top security researcher shares their bug bounty process

For this year's Cybersecurity Awareness Month, the GitHub Bug Bounty team is excited to put the spotlight on a talented security...

Read Article

October 07, 2025 07:00 AM

How a top bug bounty researcher got their start in security

For this year's Cybersecurity Awareness Month, the GitHub Bug Bounty team is excited to feature another spotlight on a talented security...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-81934

SUMMARY

Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server. Fixed in Redis 8.2.9, 8.4.6, 8.6.6, 8.8.2, and 8.10.1.

Published

Date2026-08-27

Updated

Date2026-08-27

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-81931

SUMMARY

Unrestricted Upload of File with Dangerous Type in the product photo upload in Roskus Prospero Flow CRM before 5.16.0 allows an authenticated user holding the create product permission (routine Seller role) to execute arbitrary JavaScript in the application origin. The photo validation rule classifies the file only by its content (magic bytes) and rejects only a fixed list of PHP extensions, while ProductSaveController::save() names the stored file using the client-supplied extension and copies it into the public web root. A file that begins with an image header and carries an HTML extension passes validation, is stored under public/asset/upload/product/, and is served with a text/html content type, turning the upload into first-party stored script execution.

Published

Date2026-08-27

Updated

Date2026-08-27

RISK INFORMATION (Score: )

cvss4

Base Score: 4.8

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-81893

SUMMARY

A flaw was found in gdk-pixbuf. When loading a specially crafted JPEG image containing chunked ICC profile markers, an error during ICC profile parsing can leave stale size metadata after the profile buffer is freed. A subsequent allocation in the same decode can cause an out-of-bounds write, potentially crashing the application. To exploit this flaw, an application using gdk-pixbuf must process the malicious JPEG image. Affected version >= 2.26.4

Published

Date2026-08-27

Updated

Date2026-08-27

RISK INFORMATION (Score: 4.7)

cvss3

Base Score: 4.7

Complexity: HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

REFERENCES

CVE-2026-81838

SUMMARY

A relative path traversal issue in the zip extraction functionality in AWS diagram-as-code (awsdac) in versions 0.10 through 0.23 can allow a third party to write arbitrary files to the local filesystem via crafted zip entry names containing path traversal sequences. This could allow the third party to perform inappropriate actions in the diagram bundle. To remediate this issue, users should upgrade to the version 0.24 or later.

Published

Date2026-08-27

Updated

Date2026-08-27

RISK INFORMATION (Score: 7.1)

cvss3

Base Score: 7.1

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

cvss4

Base Score: 6.8

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.2

Exploitability

1.8

REFERENCES

CVE-2026-81834

SUMMARY

A weakness has been identified in RooCodeInc Roo-Code up to 3.51.1. Affected by this issue is the function ExecaTerminalProcess of the component README File Handler. Executing a manipulation can lead to code injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. Multiple isses were reported to the vendor beforehand. They explain, that "they all apply to Roo Code, a project we no longer support - the repository was archived a while ago, and we don't encourage anyone to use it." This vulnerability only affects products that are no longer supported by the maintainer.

Published

Date2026-08-27

Updated

Date2026-08-27

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…