https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 14:33:38 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-323050 EUVD-2026-323050 https://cve.radiocsirt.org/vuln/euvd-2026-323050 https://cve.radiocsirt.org/vuln/fkie_cve-2026-44358 <p>Espressif Shared GitHub DangerJS is a reusable GitHub Action CI DangerJS workflow for Espressif GitHub projects. Prior to 1.0.1, the action&#39;s entrypoint.sh invoked DangerJS from the caller&#39;s workspace after copying the fork&#39;s checkout into it, creating an untrusted search path for both binary resolution and Node.js module resolution. A fork pull request processed by a pull_request_target workflow could therefore cause fork-supplied code to execute inside the action container in place of the action&#39;s own code. This vulnerability is fixed in 1.0.1.</p> <p>Espressif Shared GitHub DangerJS is a reusable GitHub Action CI DangerJS workflow for Espressif GitHub projects. Prior to 1.0.1, the action&#39;s entrypoint.sh invoked DangerJS from the caller&#39;s workspace after copying the fork&#39;s checkout into it, creating an untrusted search path for both binary resolution and Node.js module resolution. A fork pull request processed by a pull_request_target workflow could therefore cause fork-supplied code to execute inside the action container in place of the action&#39;s own code. This vulnerability is fixed in 1.0.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-44358