Skip to content
OpenAdvisories

Vendor

embano1

1 known vulnerabilities.

Products

wip 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2023-30623

    Arbitrary command injection in embano1/wip

    `embano1/wip` is a GitHub Action written in Bash. Prior to version 2, the `embano1/wip` action uses the `github.event.pull_request.title` parameter in an insecure way. The title parameter is used in a run statement - resulting in a command injection vulnerabi…

    embano1 wip embano1/wip GitHub Actions