8 matches found
CVE-2026-58502
githubtoplanguages generates a user's top GitHub languages as an SVG. The .github/workflows/discord-issue.yml workflow runs when an issue is opened or closed and interpolates github.event.issue.title directly into the Bash assignment for ISSUETITLE before shell parsing. An issue title containing...
CVE-2026-58502
githubtoplanguages , a tool that renders a user's top GitHub languages as an SVG, is affected by a command injection in its .github/workflows/discord-issue.yml GitHub Actions workflow. The workflow interpolates github.event.issue.title directly into a Bash assignment before shell parsing, so any ...
CVE-2026-58502 githubtoplanguages: Command Injection via Issue Title in Discord Notification Workflow
githubtoplanguages generates a user's top GitHub languages as an SVG. The .github/workflows/discord-issue.yml workflow runs when an issue is opened or closed and interpolates github.event.issue.title directly into the Bash assignment for ISSUETITLE before shell parsing. An issue title containing...
EUVD-2026-78911
githubtoplanguages generates a user's top GitHub languages as an SVG. The .github/workflows/discord-issue.yml workflow runs when an issue is opened or closed and interpolates github.event.issue.title directly into the Bash assignment for ISSUETITLE before shell parsing. An issue title containing...
CVE-2026-58502 githubtoplanguages: Command Injection via Issue Title in Discord Notification Workflow
githubtoplanguages generates a user's top GitHub languages as an SVG. The .github/workflows/discord-issue.yml workflow runs when an issue is opened or closed and interpolates github.event.issue.title directly into the Bash assignment for ISSUETITLE before shell parsing. An issue title containing...
CVE-2026-58502 githubtoplanguages: Command Injection via Issue Title in Discord Notification Workflow
githubtoplanguages generates a user's top GitHub languages as an SVG. The .github/workflows/discord-issue.yml workflow runs when an issue is opened or closed and interpolates github.event.issue.title directly into the Bash assignment for ISSUETITLE before shell parsing. An issue title containing...
PT-2026-92173
githubtoplanguages generates a user's top GitHub languages as an SVG. The .github/workflows/discord-issue.yml workflow runs when an issue is opened or closed and interpolates github.event.issue.title directly into the Bash assignment for ISSUE TITLE before shell parsing. An issue title containing...
CVE-2026-58502: Improper Neutralization of Special Elements used in an OS Command
githubtoplanguages generates a user's top GitHub languages as an SVG. The .github/workflows/discord-issue.yml workflow runs when an issue is opened or closed and interpolates github.event.issue.title directly into the Bash assignment for ISSUETITLE before shell parsing. An issue title containing...