CVE-2022-39217

some-natalie/ghas-to-csv GitHub Advanced Security to CSV is a GitHub action which scrapes the GitHub Advanced Security API and shoves it into a CSV. In affected versions this GitHub Action creates a CSV file without sanitizing the output of the APIs. If an alert is dismissed or any other custom...

CVE-2022-39217: Improper Neutralization of Special Elements in Output Used by a Downstream Component

some-natalie/ghas-to-csv GitHub Advanced Security to CSV is a GitHub action which scrapes the GitHub Advanced Security API and shoves it into a CSV. In affected versions this GitHub Action creates a CSV file without sanitizing the output of the APIs. If an alert is dismissed or any other custom...

PT-2022-24816

Name of the Vulnerable Software and Affected Versions some-natalie/ghas-to-csv versions prior to v1 Description The issue arises from the GitHub Action creating a CSV file without sanitizing the output of the APIs. If an alert is dismissed or any other custom field contains executable code or...