CVE-2026-65820

The aeon Python library (a scikit-learn compatible library for time series) is vulnerable in versions prior to 1.5.0 . A GitHub Actions workflow utilized pull_request_target for pre-commit checks, allowing code from malicious forks to be executed in a privileged context . This configuration could...