GHSA-m62c-5q34-f3cfPublished
Actual Sync Server: CORS Proxy GitHub API Allowlist Prefix Bypass Leaks Private Repositories Through the Server GitHub Token
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-57449 · Microsoft / collected KEV context
cve-program · CVE-2026-57449
euvd · EUVD-2026-87369
nvd · CVE-2026-57449
osv · GHSA-m62c-5q34-f3cf
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.