Skip to content
OpenAdvisories

Vendor

skim-rs

1 known vulnerabilities.

Products

skim 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.4
    CVE-2026-41414 Public exploit

    Skim: Arbitrary code execution via pull_request_target fork checkout in pr.yml

    Skim is a fuzzy finder designed to through files, lines, and commands. The generate-files job in .github/workflows/pr.yml checks out attacker-controlled fork code and executes it via cargo run, with access to SKIM_RS_BOT_PRIVATE_KEY and GITHUB_TOKEN (contents…

    skim-rs skim