Skip to content
OpenAdvisories

Package · GitHub Actions

check-spelling/check-spelling

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.9
    CVE-2021-32724 Public exploit

    check-spelling workflow vulnerable to GITHUB_TOKEN leakage via symlink attack

    check-spelling is a github action which provides CI spell checking. In affected versions and for a repository with the [check-spelling action](https://github.com/marketplace/actions/check-spelling) enabled that triggers on `pull_request_target` (or `schedule`…

    check-spelling check-spelling check-spelling/check-spelling GitHub Actions