ctipilot.ch

github.dev OAuth-token theft

trend · trend:github-dev-oauth-token-theft-2026

One-click github.dev webview OAuth-token theft via a postMessage origin flaw — unpatched with a public PoC at disclosure.

Coverage timeline
0
first 2026-06-04 → last –
no data
Peak priority
no matching entries
Sources cited
0
0 hosts
Sections touched
0
Co-occurring entities
0
no co-occurrence
ATT&CK techniques
0
no mapped behavior yet

Story timeline

No published entries reference this entity yet.

explore in graph

Entries about github.dev OAuth-token theft

No published entry references this entity yet · entries match by registry key, by the entity's name or a public alias appearing in the entry title or body, or (for CVE entities) by exact CVE id.