Skip to content
OpenAdvisories

Product · aeon-toolkit

aeon

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.7

    aeon: Privileged GitHub Actions workflow allowed fork-controlled code execution

    aeon is a scikit-learn compatible Python library for learning from time series. Prior to version 1.5.0, a GitHub Actions workflow used pull_request_target for pre-commit checks on pull requests from forks. In this configuration, fork-controlled code could be …