GHSA-j7ww-2w32-2mch - Inclusion of Functionality from Untrusted Control Sphere in ChatGPT-Next-Web
Vercel Token Leak via pull_request_target -> Full Account Takeover possible | Patched: v2.15.3
π [Official GitHub Advisory Link]GHSA-j7ww-2w32-2mch - VERCEL_TOKEN Leak - CVSS 10.0
π Founder: bugbounty-learning-hub - Free for Students
VERCEL_TOKEN Leak β Full Vercel Account Takeover was possible
- Impact: Critical | Status: β Fixed after my report
