Skip to content
OpenAdvisories

Vendor

MaaAssistantArknights

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8

    MaaAssistantArknights: PR-title expression injection in release-preparation.yml

    MaaAssistantArknights is a one-click tool for daily Arknights tasks. In the current dev-v2 workflow, .github/workflows/release-preparation.yml inlined attacker-controlled github.event.pull_request.title into a run: shell command during the pull_request opened…