1 matches found
CVE-2026-58502 githubtoplanguages: Command Injection via Issue Title in Discord Notification Workflow
githubtoplanguages generates a user's top GitHub languages as an SVG. The .github/workflows/discord-issue.yml workflow runs when an issue is opened or closed and interpolates github.event.issue.title directly into the Bash assignment for ISSUETITLE before shell parsing. An issue title containing...
7.1CVSS
SaveExploits0References4
20