CPE
Gitingest versions 0.3.1 and earlier contain a hostname validation vulnerability allowing attackers to force outbound connections and exfiltrate GitHub personal access tokens.