Lucene search
+L

1 matches found

OSV
OSV
added 2026/09/15 5:37 p.m.5 views

CVE-2026-58502 githubtoplanguages: Command Injection via Issue Title in Discord Notification Workflow

githubtoplanguages generates a user's top GitHub languages as an SVG. The .github/workflows/discord-issue.yml workflow runs when an issue is opened or closed and interpolates github.event.issue.title directly into the Bash assignment for ISSUETITLE before shell parsing. An issue title containing...

7.1CVSS
SaveExploits0References4
Rows per page
Query Builder