Skip to content
OpenAdvisories

Package · GitHub Actions

Tiryoh/actions-mkdocs

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    GHSA-6p2j-742g-835f

    actions-mkdocs: Command Injection via issue title in internal GitHub Actions workflow

    ### Summary External input from `github.event.issue.title` is used unsafely in a shell command in `.github/workflows/release-candidate.yaml`, allowing command injection during workflow execution. ### Details In `.github/workflows/release-candidate.yaml`, the …

    Tiryoh/actions-mkdocs GitHub Actions