Skip to content
OpenAdvisories

Package · GitHub Actions

m00nl1ght-dev/steam-workshop-deploy

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 10.0
    GHSA-x6gv-2rvh-qmp6

    m00nl1ght-dev/steam-workshop-deploy: Exposure of Version-Control Repository to an Unauthorized Control Sphere and Insufficiently Protected Credentials

    ## Summary The `steam-workshop-deploy` github action does not exclude the `.git` directory when packaging content for deployment and provides no built-in way to do so. If a `.git` folder exists in the target directory (e.g., due to a local Git repo, custom pr…

    BoldestDungeon/steam-workshop-deploy m00nl1ght-dev/steam-workshop-deploy GitHub Actions