Tagged “actions”
CVEs tagged actions, newest first.
3 CVEsRSS
CVE-2026-55158Critical· 9.1Conflibot warns in advance when merging a pull request will cause conflicts in other open pull requests
Conflibot warns in advance when merging a pull request will cause conflicts in other open pull requests. Prior to 1.2.1, src/index.ts builds git checkout, git merge, and git format-patch commands by interpolating the attacker-controlled …
▾ Midnightwktk · conflibotEPSS 0.45%via NVD
GHSA-c3xh-98xp-6qhfHighgithubtoplanguages: Command Injection via Issue Title in Discord Notification Workflow
githubtoplanguages: Command Injection via Issue Title in Discord Notification Workflow
▾ Twilightgouef · gouef/githubtoplanguagesvia GHSA
CVE-2026-47751MediumClaude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret Exfiltration
Claude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret Exfiltration
▾ Sunlitanthropics · anthropics/claude-code-actionEPSS 0.77%via GHSA