CVE-2023-34111

The CVE-2023-34111 entry concerns a command-injection in the taosdata/grafanaplugin Release PR Merged GitHub Action workflow. Insecurely passing the PR title via ${{ github.event.pull_request.title }} into a bash command allows an attacker to execute arbitrary code within the workflow context, po...