Skip to content
OpenAdvisories

Vendor

sherlock-project

1 known vulnerabilities.

Products

sherlock 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-44590 Public exploit

    Sherlock: Command Injection via pull_request_target in validate_modified_targets.yml

    Sherlock hunts down social media accounts by username across social networks. Prior to 0.16.1, the GitHub Actions workflow validate_modified_targets.yml is vulnerable to command injection via the pull_request_target trigger. Any GitHub user can execute arbitr…

    sherlock-project sherlock sherlock Ubuntu