UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-107618
`POST /{owner}/{repo}/topics` was registered without the sign-in middleware that provides the cross-origin protection, so a request issued by a third-party site was not rejected. A repository administrator who visited a malicious page could have the topics of their repository changed. No other repository settings were reachable through this route.
Properties
- Last source
- FIRST EPSS
- Nvd fetched at
- 2026-10-20T21:14:08.448323+00:00
- Epss score
- 0.00156
- Cve id
- CVE-2026-107618
- First seen by Signal
- 2026-10-18T22:14:59+00:00
- Retrieved at
- 2026-10-21T01:24:48+00:00
- Published at
- 2026-10-18T19:16:32.807
- Last modified
- 2026-10-19T20:52:16.127
- Epss percentile
- 0.04359
Explore deeper with Ninja Signal's threat intelligence graph