CVE-2020-14189

The execute function in in the Atlassian gajira-comment GitHub Action before version 2.0.2 allows remote attackers to execute arbitrary code in the context of a GitHub runner by creating a specially crafted GitHub issue comment...

CVE-2020-14189: Undefined Security Weakness

The execute function in in the Atlassian gajira-comment GitHub Action before version 2.0.2 allows remote attackers to execute arbitrary code in the context of a GitHub runner by creating a specially crafted GitHub issue comment...

Information Disclosure

github.com/go-gitea/gitea is vulnerable to information disclosure attacks. The vulnerability exists where all users emails would be disclosed when an issue comment mail is sent out when it was not supposed to, causing the information disclosure vulnerability...