Skip to content
OpenAdvisories

Vendor

xygeni

1 known vulnerabilities.

Products

xygeni-action 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-31976

    xygeni-action v5 tag poisoned with C2 backdoor

    xygeni-action is the GitHub Action for Xygeni Scanner. On March 3, 2026, an attacker with access to compromised credentials created a series of pull requests (#46, #47, #48) injecting obfuscated shell code into action.yml. The PRs were blocked by branch prote…

    xygeni xygeni-action xygeni/xygeni-action GitHub Actions