CVE-2025-32953

z80pack is a mature emulator of multiple platforms with 8080 and Z80 CPU. In version 1.38 and prior, the makefile-ubuntu.yml workflow file uses actions/upload-artifact@v4 to upload the z80pack-ubuntu artifact. This artifact is a zip of the current directory, which includes the automatically...

CVE-2025-32953

creationtimestamp| type| source ---|---|--- 2025-04-18 20:59:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12538 2025-04-18 23:30:24+00:00| published-proof-of-concept| Telegram/oRg411HAomHdISM9O3TVQssrB2w8dJGX9X47vDNRx0yd1g 2025-04-18 23:36:24+00:00| seen|...

CVE-2025-32953 z80pack Vulnerable to Exposure of the GITHUB_TOKEN in Workflow Run Artifact

z80pack is a mature emulator of multiple platforms with 8080 and Z80 CPU. In version 1.38 and prior, the makefile-ubuntu.yml workflow file uses actions/upload-artifact@v4 to upload the z80pack-ubuntu artifact. This artifact is a zip of the current directory, which includes the automatically...

CVE-2025-32953 z80pack Vulnerable to Exposure of the GITHUB_TOKEN in Workflow Run Artifact

z80pack is a mature emulator of multiple platforms with 8080 and Z80 CPU. In version 1.38 and prior, the makefile-ubuntu.yml workflow file uses actions/upload-artifact@v4 to upload the z80pack-ubuntu artifact. This artifact is a zip of the current directory, which includes the automatically...

CVE-2025-32953

CVE-2025-32953 affects z80pack (versions 1.38 and earlier). The root cause is in the makefile-ubuntu.yml workflow, which uses actions/upload-artifact@v4 to package z80pack-ubuntu as an artifact that zip-compresses the current directory and includes the generated .git/config containing the run’s G...