Skip to content
OpenAdvisories

Vendor

shriyanss

1 known vulnerabilities.

Products

js-recon 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-55378

    JS Recon: Command injection in PR Branch Checker workflow via untrusted pull request context values

    JS Recon is a JavaScript enumeration and SAST tool. From 1.2.1-beta.1 until 1.3.1-beta.2, the PR Branch Checker workflow in .github/workflows/pr_checker.yml places github.head_ref and github.event.pull_request.head.repo.full_name into BRANCH_NAME and SOURCE_R…

    shriyanss js-recon