Skip to content
OpenAdvisories

Package · GitHub Actions

xygeni/xygeni-action

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.3
    CVE-2026-31976

    xygeni-action v5 tag poisoned with C2 backdoor

    xygeni-action is the GitHub Action for Xygeni Scanner. On March 3, 2026, an attacker with access to compromised credentials created a series of pull requests (#46, #47, #48) injecting obfuscated shell code into action.yml. The PRs were blocked by branch prote…

    xygeni xygeni-action xygeni/xygeni-action GitHub Actions