@vitobotta.com on Bluesky

JavaScript RequiredThis is a heavily interactive web application, and JavaScript is required. Simple HTML interfaces are possible, but that is not what this is. Learn more about Bluesky at bsky.social and atproto.com.

Post

Vito Botta

vitobotta.com

did:plc:fw6vwfuptwdbfgx2jvoi4igb

GitHub Enterprise bug bounty: PATs without repo scope could still leak private issues and commits via search endpoints. CVE-2026-3582 shows that token scopes need consistent enforcement across ALL API paths. Check your token boundaries.

2026-03-30T16:14:06.492Z