1 result · Clear filters · Feed
-
High 8.7
aeon: Privileged GitHub Actions workflow allowed fork-controlled code execution
aeon is a scikit-learn compatible Python library for learning from time series. Prior to version 1.5.0, a GitHub Actions workflow used pull_request_target for pre-commit checks on pull requests from forks. In this configuration, fork-controlled code could be …