gitify-app gitify vulnerabilities

Latest gitify-app gitify CVEs

Newest publication first

1. CVE-2026-112050 Gitify before 7.10.0 Login CSRF via Missing OAuth State Validation

   Published 2026-10-18

   Low·CVSS 2.3

   Gitify before 7.10.0 contains a login cross-site request forgery vulnerability that allows remote attackers to bind a victim's client to their account because performGitHubWebOAuth() omits OAuth state validation. Attackers can get a gitify://oauth?code= link with their own author...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.