GoKawiilResearcher finds 100+ vulnerabilities in UK government public code repositories
Security researcher Chris Nesbitt-Smith identified over 100 serious vulnerabilities in publicly published UK government code, including at the Department of Health and Social Care, the Home Office, and local authorities. The most severe case involved the Planning Inspectorate, which accidentally committed non-expiring Microsoft Entra ID credentials to GitHub that could have granted full read-write access to all SharePoint sites, private OneDrive accounts, HR records, and legally protected planning inquiry evidence.