Skip to content
OpenAdvisories

Vendor

lycheeverse

1 known vulnerabilities.

Products

lychee-action 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2024-48908

    lychee-action vulnerable to arbitrary code injection in composite action

    lychee link checking action checks links in Markdown, HTML, and text files using lychee. Prior to version 2.0.2, there is a potential attack of arbitrary code injection vulnerability in lychee-setup of the composite action at action.yml. This issue has been p…

    lycheeverse lychee-action lycheeverse/lychee-action GitHub Actions