Description
lychee link checking action checks links in Markdown, HTML, and text files using lychee. Prior to version 2.0.2, there is a potential attack of arbitrary code injection vulnerability in lychee-setup of the composite action at action.yml. This issue has been patched in version 2.0.2.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| lycheeverse | lychee-action | < 2.0.2 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| GitHub Actions | lycheeverse/lychee-action | < 2.0.2 | 2.0.2 | GHSA-65rg-554r-9j5x |