Skip to content
OpenAdvisories

Package · Ubuntu

meshtastic

3 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 10.0

    Meshtastic GitHub repo vulnerable to Arbitrary Code Execution via pull_request_target Fork Checkout in CI Workflow

    Meshtastic is an open source mesh networking solution. Prior to version 2.7.21.1370b23, the Meshtastic GitHub repository's main_matrix.yml workflow is triggered by pull_request_target and multiple jobs check out the attacker's fork code and execute it with ac…