@e2e-dev/github vulnerabilities

CVEs whose affected-version data names the @e2e-dev/github package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-113357Low· 3.5

today

@e2e-dev/github before 0.4.1 CI Report Hijacking via Predictable Comment Marker

@e2e-dev/github before 0.4.1 contains an improper authorization vulnerability that allows pull request commenters to hijack CI test reports by posting comments with the predictable marker. Because findComment and upsertComment in post.ts…

▾ Sunlittester-army · @e2e-dev/githubvia CVEORG