webhooks

GitHub is reporting an incident affecting several of its core developer services, including Actions, Pages, and Webhooks. Developers are being alerted to the disruption via GitHub's status page, and many are checking in to see if their continuous integration pipelines, static site deployments, and automated integrations are impacted. Outages at GitHub tend to draw wide attention given how central the platform is to software workflows.

Developer 4yk5 has released Ghostman, an open-source terminal-based API client and webhook inspector, announcing it on Hacker News. The tool works entirely from the keyboard in a text user interface, promising fast performance for developers who prefer working in the terminal over graphical clients like Postman. Early engagement suggests interest from the developer community.

A newly published vulnerability, CVE-2026-121970, affects the Pay with Vipps and MobilePay plugin for WooCommerce in versions 5.0.0 through 6.4.0. When no webhook secret is stored, unauthenticated attackers can send forged recurring-payment webhooks and cancel a customer's active subscription. Security researchers are circulating the advisory, noting that no exploitation has been confirmed so far.

A vulnerability tracked as EUVD-2026-117216, scored 8.3 out of 10 under CVSS v3.1, has been disclosed in Kyverno, the Kubernetes policy management tool. Versions before 1.19.2 contain a denial of service flaw in the substituteVariablesIfAny function that lets low-privileged users hang the admission webhook, potentially blocking workloads. Administrators running older versions are being urged to review and patch.