CVE-2024-42471

actions/artifact is the GitHub ToolKit for developing GitHub Actions. Versions of "actions/artifact" on the 2.x branch before 2.1.2 are vulnerable to arbitrary file write when using "downloadArtifactInternal", "downloadArtifactPublic", or "streamExtractExternal" for extracting a specifically...

CVE-2024-42471: Improper Limitation of a Pathname to a Restricted Directory

actions/artifact is the GitHub ToolKit for developing GitHub Actions. Versions of actions/artifact on the 2.x branch before 2.1.2 are vulnerable to arbitrary file write when using downloadArtifactInternal, downloadArtifactPublic, or streamExtractExternal for extracting a specifically crafted...