Skip to content
OpenAdvisories

Package · GitHub Actions

step-security/harden-runner

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.7
    CVE-2024-52587

    Harden-Runner has command injection weaknesses in `setup.ts` and `arc-runner.ts`

    StepSecurity's Harden-Runner provides network egress filtering and runtime security for GitHub-hosted and self-hosted runners. Versions of step-security/harden-runner prior to v2.10.2 contain multiple command injection weaknesses via environment variables tha…

    step-security harden-runner step-security/harden-runner GitHub Actions