GitHub Gist: Account takeover vulnerability patched in code-sharing web service

On October 19, bug bounty hunter William “vakzz” Bowling released a GitHub security advisory – one of three – that disclosed a severe bug exposing individual ‘gists’ due to open redirect errors.