CVE-2021-32724

check-spelling is a github action which provides CI spell checking. In affected versions and for a repository with the check-spelling action enabled that triggers on pullrequesttarget or schedule, an attacker can send a crafted Pull Request that causes a GITHUBTOKEN to be exposed. With the...

check-spelling 日志信息泄露漏洞

check-spelling is a spell checker. check-spelling suffers from a log information disclosure vulnerability that allows an attacker to bypass the standard approval process to push commits to the repository, commits to the repository can then steal any/all secrets available to the repository...

PT-2021-7455

Name of the Vulnerable Software and Affected Versions check-spelling versions prior to v0.0.19 Description The issue is related to the exposure of the GITHUB TOKEN in the check-spelling GitHub action, which can be triggered by a crafted Pull Request. This exposure allows an attacker to push commi...