Skip to content
OpenAdvisories

Package · GitHub Actions

j178/prek-action

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.9
    GHSA-pwf7-47c3-mfhx

    j178/prek-action vulnerable to arbitrary code injection in composite action

    ### Summary There are three potential attacks of arbitrary code injection vulnerability in the composite action at _action.yml_. ### Details The GitHub Action variables `inputs.prek-version`, `inputs.extra_args`, and `inputs.extra-args` can be used to execute…

    j178/prek-action GitHub Actions