1 matches found
Salty Organization documents: Software supply chain vulnerabilities
The previous version of Salty Organization’s documentation contained a security vulnerability. This vulnerability stemmed from an untrusted fork submission recorded in the prinfo component via trigger-pr-build.yml. The build-pr.yml file checked out that submission and ran “pip install”, allowing...
10CVSS6.2AI score0.00427EPSS
SaveExploits0References2
20