Skip to content
OpenAdvisories

Package · GitHub Actions

SHAdd0WTAka/Zen-Ai-Pentest

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 10.0
    GHSA-f67f-hcr6-94mf

    Zen-AI-Pentest has Shell Injection via untrusted issue title in ZenClaw Discord Integration workflow

    ## Summary The `ZenClaw Discord Integration` GitHub Actions workflow is vulnerable to shell command injection. The issue title field, controllable by any GitHub user, is interpolated directly into a `run` shell block via a GitHub Actions template expression. …

    SHAdd0WTAka/Zen-Ai-Pentest GitHub Actions