Skip to content
OpenAdvisories

Package · GitHub Actions

atlassian/gajira-create

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    CVE-2020-14188

    gajira-create GitHub action vulnerable to arbitrary code execution

    The preprocessArgs function in the Atlassian gajira-create GitHub Action before version 2.0.1 allows remote attackers to execute arbitrary code in the context of a GitHub runner by creating a specially crafted GitHub issue.

    Atlassian gajira-create atlassian/gajira-create GitHub Actions