If you discover a security issue in this repo, please submit it through the GitHub Security Bug Bounty
Thanks for helping make GitHub Actions safe for everyone.
Security: actions/toolkit
Security
SECURITY.md
-
Arbitrary File Write via artifact extractionGHSA-6q32-hq47-5qq3 published
Sep 2, 2024 by joshmgrossHigh -
Delimiter injection vulnerability in @actions/core exportVariableGHSA-7r3h-m5j6-3q42 published
Aug 12, 2022 by thboopModerate -
`add-path` and `set-env` Runner commands are processed via stdoutGHSA-mfwh-5m23-j46w published
Oct 1, 2020 by chrispatModerate
Learn more about advisories related to actions/toolkit in the GitHub Advisory Database