Tagged “actions”
CVEs tagged actions, newest first.
4 CVEsRSS
CVE-2026-55158Critical· 9.1Conflibot warns in advance when merging a pull request will cause conflicts in other open pull requests
Conflibot warns in advance when merging a pull request will cause conflicts in other open pull requests. Prior to 1.2.1, src/index.ts builds git checkout, git merge, and git format-patch commands by interpolating the attacker-controlled …
▾ Midnightwktk · conflibotEPSS 0.80%via NVD
GHSA-jj69-4grx-fqj5Critical· 7.8Duplicate Advisory: Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypasses
Duplicate Advisory: Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypasses
▾ Midnightgoogle-github-actions · google-github-actions/run-gemini-clivia GHSA
GHSA-c3xh-98xp-6qhfHighgithubtoplanguages: Command Injection via Issue Title in Discord Notification Workflow
githubtoplanguages: Command Injection via Issue Title in Discord Notification Workflow
▾ Twilightgouef · gouef/githubtoplanguagesvia GHSA
CVE-2026-47751MediumClaude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret Exfiltration
Claude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret Exfiltration
▾ Sunlitanthropics · anthropics/claude-code-actionEPSS 0.77%via GHSA