GHSA-W4GP-FJGQ-3Q4G

creationtimestamp| type| source ---|---|--- 2026-03-27 23:28:45+00:00| published-proof-of-concept| Telegram/Y8kzkrSdzd2cmfNdKzxY7235NQsCILSeJh1PyUoA-eHkPkg...

GHSA-58R7-4WR5-HFX8

creationtimestamp| type| source ---|---|--- 2026-03-27 23:28:35+00:00| published-proof-of-concept| Telegram/GtEl0gL3vlqQaCU7OfUhEkhd2JzglfpejZoGd3NHIPeYno...

GHSA-45G3-CV93-Q59V

creationtimestamp| type| source ---|---|--- 2026-03-27 23:28:35+00:00| published-proof-of-concept| Telegram/GtEl0gL3vlqQaCU7OfUhEkhd2JzglfpejZoGd3NHIPeYno...

GHSA-F42F-PHVP-43X5

creationtimestamp| type| source ---|---|--- 2026-03-27 23:28:35+00:00| published-proof-of-concept| Telegram/GtEl0gL3vlqQaCU7OfUhEkhd2JzglfpejZoGd3NHIPeYno...

GHSA-3843-RR4G-M8JQ

creationtimestamp| type| source ---|---|--- 2026-03-27 23:28:35+00:00| published-proof-of-concept| Telegram/GtEl0gL3vlqQaCU7OfUhEkhd2JzglfpejZoGd3NHIPeYno...

GHSA-VPHC-468G-8RFP

creationtimestamp| type| source ---|---|--- 2026-03-27 23:28:35+00:00| published-proof-of-concept| Telegram/GtEl0gL3vlqQaCU7OfUhEkhd2JzglfpejZoGd3NHIPeYno...

GHSA-PWQR-WMGM-9RR8

creationtimestamp| type| source ---|---|--- 2026-03-27 21:23:14+00:00| published-proof-of-concept| Telegram/B1-lnNSHplGL4tzlck3EB0WXwjfJllp4cXItiyc0oKB0vU...

GHSA-4GMR-2VC8-7QH3

creationtimestamp| type| source ---|---|--- 2026-03-27 21:23:14+00:00| published-proof-of-concept| Telegram/B1-lnNSHplGL4tzlck3EB0WXwjfJllp4cXItiyc0oKB0vU...

GHSA-W9FJ-CFPG-GRVV

creationtimestamp| type| source ---|---|--- 2026-03-27 21:23:14+00:00| published-proof-of-concept| Telegram/B1-lnNSHplGL4tzlck3EB0WXwjfJllp4cXItiyc0oKB0vU...

GHSA-RWCR-RPCC-3G9M

creationtimestamp| type| source ---|---|--- 2026-03-27 21:23:14+00:00| published-proof-of-concept| Telegram/B1-lnNSHplGL4tzlck3EB0WXwjfJllp4cXItiyc0oKB0vU...

GHSA-828H-5X96-RQX7

creationtimestamp| type| source ---|---|--- 2026-03-27 21:23:14+00:00| published-proof-of-concept| Telegram/B1-lnNSHplGL4tzlck3EB0WXwjfJllp4cXItiyc0oKB0vU...

GHSA-584P-RPVQ-35VF

creationtimestamp| type| source ---|---|--- 2026-03-27 19:19:15+00:00| published-proof-of-concept| Telegram/XCH0TsqFcgtqQSEM226PLv68rO7cMcwSSZTFwAARVhm43GQ...

GHSA-FJ74-QXJ7-R3VC

creationtimestamp| type| source ---|---|--- 2026-03-27 19:19:15+00:00| published-proof-of-concept| Telegram/XCH0TsqFcgtqQSEM226PLv68rO7cMcwSSZTFwAARVhm43GQ...

CVE-2026-24373

creationtimestamp| type| source ---|---|--- 2026-03-27 19:18:40+00:00| published-proof-of-concept| Telegram/1bFqVBg1WZRYib4qCiBn36zcLriGuSpWJXWdU6ZWtzYtM...

CVE-2026-23806

creationtimestamp| type| source ---|---|--- 2026-03-27 19:18:40+00:00| published-proof-of-concept| Telegram/1bFqVBg1WZRYib4qCiBn36zcLriGuSpWJXWdU6ZWtzYtM...

CVE-2026-24968

creationtimestamp| type| source ---|---|--- 2026-03-27 19:18:40+00:00| published-proof-of-concept| Telegram/1bFqVBg1WZRYib4qCiBn36zcLriGuSpWJXWdU6ZWtzYtM...

CVE-2026-22448

creationtimestamp| type| source ---|---|--- 2026-03-27 19:18:40+00:00| published-proof-of-concept| Telegram/1bFqVBg1WZRYib4qCiBn36zcLriGuSpWJXWdU6ZWtzYtM...

GHSA-XMGR-9PQC-H5VW act: Unrestricted set-env and add-path command processing enables environment injection

Summary act unconditionally processes the deprecated ::set-env:: and ::add-path:: workflow commands, which GitHub Actions disabled in October 2020 CVE-2020-15228, GHSA-mfwh-5m23-j46w due to environment injection risks. When a workflow step echoes untrusted data to stdout, an attacker can inject...

CVE-2026-34396

creationtimestamp| type| source ---|---|--- 2026-03-27 18:49:12+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-v4h7-3x43-qqw4...

CVE-2026-34395

creationtimestamp| type| source ---|---|--- 2026-03-27 18:42:39+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-77jp-mgcw-rfmr...