Skip to content
OpenAdvisories

Package · GitHub Actions

gouef/githubtoplanguages

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2026-58502

    githubtoplanguages: Command Injection via Issue Title in Discord Notification Workflow

    githubtoplanguages generates a user's top GitHub languages as an SVG. The .github/workflows/discord-issue.yml workflow runs when an issue is opened or closed and interpolates github.event.issue.title directly into the Bash assignment for ISSUE_TITLE before sh…

    gouef githubtoplanguages gouef/githubtoplanguages GitHub Actions