Lucene search
+L

1 matches found

OSV
OSV
added 2022/10/25 7:54 p.m.28 views

GHSA-2C6M-6GQH-6QG3 Docker Command Escaping in the GitHub Actions Runner

Impact The actions runner invokes the docker cli directly in order to run job containers, service containers, or container actions. A bug in the logic for how the environment is encoded into these docker commands was discovered that allows an input to escape the environment variable and modify th...

8.8CVSS9.5AI score0.016EPSS
SaveExploits0References5
Rows per page
Query Builder