CVE-2026-118762

The Monkeytype typing test (prior to version 26.43.0 ) contains a vulnerability in the .github/workflows/fix-formatting.yml workflow. The workflow runs on pull_request_target with repository write permissions, allowing an external contributor to trigger the execution of an untrusted oxfmt binary ...