CVE-2026-118762

A flaw was found in Monkeytype. Its continuous integration CI workflow improperly executes untrusted code from external pull requests with elevated write permissions. A remote attacker can submit a pull request containing malicious code that executes within the build environment, allowing them to...