Skip to content
OpenAdvisories

Vendor

aeon-toolkit

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 8.7

    aeon: Privileged GitHub Actions workflow allowed fork-controlled code execution

    aeon is a scikit-learn compatible Python library for learning from time series. Prior to version 1.5.0, a GitHub Actions workflow used pull_request_target for pre-commit checks on pull requests from forks. In this configuration, fork-controlled code could be …