Skip to content
OpenAdvisories

Product · monkeytypegame

monkeytype

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-118762

    Monkeytype: fork PR can execute code with elevated GITHUB_TOKEN

    Monkeytype is a minimalistic and customizable typing test. Prior to 26.43.0, the .github/workflows/fix-formatting.yml workflow runs on pull_request_target with repository write permissions, checks out a fork pull request, installs dependencies from the fork's…

    monkeytypegame monkeytype