Skip to content
Threat Feed

Tag

Github_token

1 brief RSS
high advisory

goshs GitHub Token Leakage via ArtiPACKED Vulnerability (CVE-2026-40903)

The goshs SimpleHTTPServer prior to version 2.0.0-beta.6 is vulnerable to ArtiPACKED, potentially leading to leakage of the GITHUB_TOKEN through workflow artifacts.

cve-2026-40903 github_token credential-access artipacked
2r 1t 1c