Skip to content
OpenAdvisories

Package · GitHub Actions

actions/download-artifact

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.3
    GHSA-cxww-7g56-2vh6

    @actions/download-artifact has an Arbitrary File Write via artifact extraction

    ### Impact Versions of `actions/download-artifact` before 4.1.3 are vulnerable to arbitrary file write when downloading and extracting a specifically crafted artifact that contains path traversal filenames. ### Patches Upgrade to version 4.1.3 or higher. Alte…

    actions/download-artifact GitHub Actions