Skip to content
OpenAdvisories

Product · espressif

shared-github-dangerjs

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2026-44358

    Espressif Shared GitHub DangerJS: Untrusted Search Path in DangerJS Action Entrypoint

    Espressif Shared GitHub DangerJS is a reusable GitHub Action CI DangerJS workflow for Espressif GitHub projects. Prior to 1.0.1, the action's entrypoint.sh invoked DangerJS from the caller's workspace after copying the fork's checkout into it, creating an unt…

    espressif shared-github-dangerjs