The vulnerability of the canonical/get-workflow-version-action component of the platform for automating GitHub Actions work processes allows a hacker to gain access to the secret GITHUB_TOKEN.

The vulnerability of the “canonical/get-workflow-version-action” component of the platform for automating GitHub Actions processes is related to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the...