CVE-2026-123870

The otterdog webapp is vulnerable to unauthenticated remote code execution due to the unsafe use of Python's eval() function. The application evaluates a format-string constructed from the JSON body of incoming GitHub webhooks. If the GITHUB_WEBHOOK_SECRET configuration value is unset or empty (d...