Skip to content
OpenAdvisories

Product · taosdata

grafanaplugin

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2023-34111

    Command Injection Vulnerability in `Release PR Merged` Workflow in taosdata/grafanaplugin

    The `Release PR Merged` workflow in the github repo taosdata/grafanaplugin is subject to a command injection vulnerability which allows for arbitrary code execution within the github action context due to the insecure usage of `${{ github.event.pull_request.t…

    taosdata grafanaplugin