Skip to content
OpenAdvisories

Vendor

zizmorcore

1 known vulnerabilities.

Products

zizmor 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.0
    CVE-2026-102289

    zizmor: Debug logging prints available GitHub credentials in cleartext

    zizmor is a static analysis tool for CI/CD systems. In version 1.27.0, debug logging serializes the parsed application configuration with a derived Debug implementation for GitHubToken, causing credentials supplied through GH_TOKEN, GITHUB_TOKEN, ZIZMOR_GITHU…

    zizmorcore zizmor zizmor PyPI