AI-generated from public sourcesThe starting point for every profile: auto-generated by 0-Doubt from public vendor materials, and not yet confirmed by the vendor or an independent analyst. Nothing here is hidden or overstated — it simply has not been reviewed yet.Where every profile starts, before the vendor or an analyst has reviewed it. A higher label means a more independent source — not a better product.How trust works →Secure coding rating: 0/100How this score is computedA product with no known CVEs starts at a neutral score and climbs the longer it goes without one; a product with known CVEs is penalized by severity instead. This one has 2430 known CVEs (vendor-level match — see the CVE list below) and is tracked as ~51 days old in our catalog (a stand-in for real release date, which we don't track). The platform admin controls the formula's weights.
GitHub, founded in 2008, is a large (5,000+ employee) code-hosting platform for open-source and private software projects, with application-security tooling built into its offering.
Known CVEs (2430)40 newAbout this listSourced from the public NVD database, matched by vendor name. Shown here at the vendor level — we don't track per-product/version data, so a listed CVE may affect a different product from this vendor, not necessarily this one. “New” means published within the last 30 days. “Actively exploited” means CISA's Known Exploited Vulnerabilities (KEV) catalog confirms real-world exploitation, not just a theoretical severity score. An “EPSS” chip appears at 10% and above: that is FIRST's estimated chance of exploitation in the next 30 days, which measures likelihood rather than impact and so can differ sharply from the severity beside it.
A vulnerability was found in alexpasmantier television up to 0.15.9. Affected by this issue is the function Entry::output of the file television/channels/entry.rs. Performing a manipulation of the arg…
A weakness has been identified in nemoTyrant manong up to 7c9e5228e133b9267ad3a415833bc9bb53193bb4. This impacts the function cache/del_cache/arr2sql of the file func.php. This manipulation causes sql…
What it does
GitHub is a widely adopted AI-powered developer platform for code hosting and collaboration, used by millions of developers and businesses to build software. It offers built-in application security features such as vulnerability detection, secret protection, and dependency scanning, enabling teams to ship secure software faster.
Strengths
70% MTTR reduction with Copilot Autofix
8.3M secret leaks stopped in the past 12 months with push protection
Built-in application security where found means fixed
Dependencies you can depend on. Update vulnerable dependencies with supported fixes for breaking changes
Your secrets, your business. Detect, prevent, and remediate leaked secrets across your organization
Copilot Autofix applies fixes in seconds
News about GitHub (6)Where this comes fromItems from GitHub's own public feeds — changelog, blog, GitHub releases or status page — that name GitHub in the headline or summary. News from GitHub that does not name this product is on the vendor's page instead. Each headline links to the original source; nothing here is written by 0-Doubt.
The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Prior to 0.0.0-20260724235538-61af6e1e6971, parser.IsSafeURL in parser/parser.go slices url[…
