Description
The Docker image from acme.sh before 40b6db6 is based on a .github/workflows/dockerhub.yml file that lacks "persist-credentials: false" for actions/checkout.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| acme.sh project | acme.sh | — | — |
High · 8.7
CVE-2025-32111
EUVD-2025-9678GHSA-qwj8-22qg-x6qf
The Docker image from acme.sh before 40b6db6 is based on a .github/workflows/dockerhub.yml file that lacks "persist-credentials: false" for…
Published Apr 4, 2025 · Updated Apr 4, 2025 · Assigned by mitre