{"items":[{"id":"CVE-2026-45033","published":"2026-05-13T15:45:26.751Z","updated":"2026-05-13T18:38:57.370Z","title":"GitHub Copilot CLI: Nested Bare Repository Can Execute Arbitrary Commands via core.fsmonitor","severity":"HIGH","score":8.5,"vendor":"github","product":"copilot-cli","kev":false,"epss":0.0035,"kevAdded":null},{"id":"CVE-2026-29783","published":"2026-03-06T16:39:27.424Z","updated":"2026-11-03T22:13:23.016Z","title":"GitHub Copilot CLI allows for dangerous shell expansion patterns that enable arbitrary command execution","severity":"HIGH","score":7.5,"vendor":"github","product":"copilot-cli","kev":false,"epss":0.00468,"kevAdded":null}]}