6 matches found
CVE-2021-21423
creationtimestamp| type| source ---|---|--- 2026-09-02 01:00:13+00:00| seen| Telegram/I58s2uZmAQqrY0Sc2SLCSg9yo3yGDFMC-JsGWGbcm0eZ9o 2026-09-03 00:00:43+00:00| published-proof-of-concept| Telegram/I58s2uZmAQqrY0Sc2SLCSg9yo3yGDFMC-JsGWGbcm0eZ9o...
CVE-2021-21423
projen is a project generation tool that synthesizes project configuration files such as package.json, tsconfig.json, .gitignore, GitHub Workflows, eslint, jest, and more, from a well-typed definition written in JavaScript. Users of projen's NodeProject project type including any project type...
CVE-2021-21423
projen is a project generation tool that synthesizes project configuration files such as package.json, tsconfig.json, .gitignore, GitHub Workflows, eslint, jest, and more, from a well-typed definition written in JavaScript. Users of projen's NodeProject project type including any project type...
CVE-2021-21423
projen is a project generation tool that synthesizes project configuration files such as package.json, tsconfig.json, .gitignore, GitHub Workflows, eslint, jest, and more, from a well-typed definition written in JavaScript. Users of projen's NodeProject project type including any project type...
CVE-2021-21423 Exposure of Version-Control Repository to an Unauthorized Control Sphere in projen
projen is a project generation tool that synthesizes project configuration files such as package.json, tsconfig.json, .gitignore, GitHub Workflows, eslint, jest, and more, from a well-typed definition written in JavaScript. Users of projen's NodeProject project type including any project type...
CVE-2021-21423
CVE-2021-21423 concerns the projen build tool. The issue centers on the rebuild-bot GitHub workflow (triggered by issue_comment with @projen rebuild) which runs with the repository’s GITHUB_TOKEN and could allow untrusted code to affect the main branch, potentially exposing secrets or altering co...