GitHub

A vulnerability within GitHub's CodeQL, a security analysis tool, was uncovered that had the potential to be exploited, potentially affecting a vast number of public and private repositories. Despite there being no evidence of actual misuse, the flaw could have allowed for the exfiltration of source code and secrets, jeopardizing the security of internal networks including GitHub's own systems. The vulnerability, which involved the exposure of a GitHub token, was quickly addressed by the GitHub team, showcasing their rapid and impressive response.

Source: https://devclass.com/2025/04/02/the-risks-of-github-actions-researcher-describes-severe-potential-of-codeql-vulnerability-now-fixed/

"id": "git350040225",
"linkid": "github",
"type": "Vulnerability",
"date": "4/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"