GitHub Actions incidents
Recent GitHub Actions vulnerabilities and malicious packages from OSV and CISA KEV, enriched with EPSS exploit probability.
githubtoplanguages: Command Injection via Issue Title in Discord Notification Workflow
githubtoplanguages: Command Injection via Issue Title in Discord Notification Workflow
gouef/githubtoplanguages: before 1.1.4
Claude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret Exfiltration
Claude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret Exfiltration
anthropics/claude-code-action: before 1.0.74
tj-actions/branch-names has a Command Injection Vulnerability
tj-actions/branch-names has a Command Injection Vulnerability
tj-actions/branch-names: before 9.0.0
Bullfrog's DNS over TCP bypasses domain filtering
Bullfrog's DNS over TCP bypasses domain filtering
bullfrogsec/bullfrog: before 0.8.4
tj-actions/changed-files has Potential Actions command injection in output filenames (GHSL-2023-271)
tj-actions/changed-files has Potential Actions command injection in output filenames (GHSL-2023-271)
tj-actions/changed-files: before 41
Arbitrary command injection in embano1/wip
Arbitrary command injection in embano1/wip
embano1/wip: before 2
github-slug-action vulnerable to arbitrary code execution
github-slug-action vulnerable to arbitrary code execution
rlespinasse/github-slug-action: 4.0.0 → 4.4.1
Azure/setup-kubectl: Escalation of privilege vulnerability for v3 and lower
Azure/setup-kubectl: Escalation of privilege vulnerability for v3 and lower
Azure/setup-kubectl: before 3
gajira-create GitHub action vulnerable to arbitrary code execution
gajira-create GitHub action vulnerable to arbitrary code execution
atlassian/gajira-create: before 2.0.1
Tooling for GitHub Actions
Some links are affiliate links — HackTribune may earn a commission at no extra cost to you.