Question 1

What is CVE-2026-58440 — CVE-2026-58440?

Accepted Answer

Webhooks created by a collaborator keep firing after their repo access is revoked → ongoing real-time exfiltration of private repo content (incomplete revocation cleanup in `DeleteCollaboration`)

Question 2

What is the authoritative source for CVE-2026-58440?

Accepted Answer

CVE-2026-58440 (CVE-2026-58440) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-58440CVE-2026-58440

Description

Scoring