Lucene search
K

7 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-17466

Malicious code in bioql PyPI...

9.9CVSS6.6AI score0.00622EPSS
Exploits0References5
NVD
NVD
added 2025/06/09 1:15 p.m.18 views

CVE-2025-49013

WilderForge is a Wildermyth coremodding API. A critical vulnerability has been identified in multiple projects across the WilderForge organization. The issue arises from unsafe usage of $ github.event.review.body and other user controlled variables directly inside shell script contexts in GitHub...

9.9CVSS0.00622EPSS
Exploits0References5
OSV
OSV
added 2025/06/09 12:47 p.m.2 views

CVE-2025-49013 WilderForge vulnerable to code Injection via GitHub Actions Workflows

WilderForge is a Wildermyth coremodding API. A critical vulnerability has been identified in multiple projects across the WilderForge organization. The issue arises from unsafe usage of $ github.event.review.body and other user controlled variables directly inside shell script contexts in GitHub...

9.9CVSS8.3AI score
Exploits0References5
CVE
CVE
added 2025/06/09 12:47 p.m.54 views

CVE-2025-49013

CVE-2025-49013 describes a code-injection vulnerability in WilderForge GitHub Actions workflows caused by unsafe use of user-controlled variables (notably ${{ github.event.review.body }}) inside shell script contexts. The issue affects WilderForge/WilderForge, WilderForge/ExampleMod, WilderForge/...

9.9CVSS10AI score0.00622EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/06/09 12:47 p.m.8 views

CVE-2025-49013 WilderForge vulnerable to code Injection via GitHub Actions Workflows

WilderForge is a Wildermyth coremodding API. A critical vulnerability has been identified in multiple projects across the WilderForge organization. The issue arises from unsafe usage of $ github.event.review.body and other user controlled variables directly inside shell script contexts in GitHub...

9.9CVSS10AI score0.00622EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/06/09 12:0 a.m.2 views

WilderForge 安全漏洞

WilderForge is a Wildermyth core module API open-sourced by WilderForge. A security vulnerability exists in WilderForge that stems from the improper use of user-controlled variables in GitHub Actions, which could lead to arbitrary command execution...

9.9CVSS7AI score0.00622EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/06/09 12:0 a.m.2 views

PT-2025-24436 · Unknown +1 · Wilderforge +1

Name of the Vulnerable Software and Affected Versions: WilderForge affected versions not specified Description: A critical issue has been identified in the WilderForge organization, stemming from the unsafe use of user-controlled variables, such as $ github.event.review.body , directly inside she...

9.9CVSS7.4AI score0.00622EPSS
Exploits0References9
Rows per page
Query Builder