CVE-2026-94620 - Classroom 50 vulnerable to arbitrary file overwrite on the teacher's machine via symlink in a student repo (gh teacher download)
CVE ID :CVE-2026-94620 Published : Oct. 1, 2026, 4:18 p.m. | 1 hour ago Description :Classroom 50 is a free and open-source tool for managing and grading programming assignments via GitHub. Prior to version 1.11.0, `gh teacher download` clones each student's assignment repository and then...