CVE-2026-94620

Published 1 October 2026 · tracked since 2 October 2026

Description

Classroom 50 is a free and open-source tool for managing and grading programming assignments via GitHub. Prior to version 1.11.0, `gh teacher download` clones each student's assignment repository and then writes autograde artifacts (`result.json` and `results.json`) into the just-cloned working tree

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-103921 HIGH 7.4
• CVE-2026-101888 HIGH 7.2
• CVE-2026-101889 MEDIUM 6.5
• CVE-2026-101890 MEDIUM 5.4
• CVE-2026-46729 HIGH 7.5
• CVE-2026-47360 HIGH 7.5
• CVE-2026-42356 LOW 3.7
• CVE-2026-42528 MEDIUM 4.3
• CVE-2026-103690 MEDIUM 6.3
• CVE-2026-97284 HIGH 8.8

→ Open the live CVE board · all tools