CVE-2026-82289: Coderamp-Labs Gitingest

High severity, CVSS 7.4. EPSS: 0.3% chance of exploitation in the next 30 days.

Gitingest through 0.3.1 fails to properly validate hostnames in _validate_host, accepting any host with a git., gitlab., or github. prefix regardless of known-hosts list membership. Attackers can submit URLs with attacker-controlled hostnames to trigger outbound connections to arbitrary hosts and disclose GitHub personal access tokens via HTTP basic credentials.

Affected products

• Coderamp-Labs Gitingest: up to and including 0.3.1

Published 2026-08-28. Last modified 2026-09-23.