PT-2026-48540

Name of the Vulnerable Software and Affected Versions Claude Code Action versions prior to 1.0.74 Description An issue exists where the action checks out attacker-controlled pull request head branches and reads the .mcp.json file from the working directory. Because all project MCP Model Context...