Skip to content
OpenAdvisories

Package · GitHub Actions

ultralytics/actions

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.3
    GHSA-7x29-qqmq-v6qc

    GitHub Actions Script Injection in `ultralytics/actions`

    ### Summary The Ultralytics action available at https://github.com/marketplace/actions/ultralytics-actions is vulnerable to GitHub Actions script injection. If anyone uses the action within a workflow that runs on the `pull_request_target` trigger, then an at…

    ultralytics/actions GitHub Actions