Skip to content
OpenAdvisories

Package · Go

github.com/ossf/allstar

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.6
    CVE-2025-61926

    Allstar Reviewbot has Authentication Bypass via Hard-coded Webhook Secret

    Allstar is a GitHub App to set and enforce security policies. In versions prior to 4.5, a vulnerability in Allstar’s Reviewbot component caused inbound webhook requests to be validated against a hard-coded, shared secret. The value used for the secret token w…

    ossf allstar github.com/ossf/allstar Go