Impact
An attacker can execute arbitrary code in the context of a GitHub runner by creating a specially crafted GitHub issue.
Patches
This issue is patched in gajira-create version 2.0.1.
Workarounds
There are no known workarounds.
GSA_kwCzR0hTQS00eHF4LXBxcGotOWZxd84AAvMB
gajira-create GitHub action vulnerable to arbitrary code execution
| Affected Packages | Affected Versions | Fixed Versions | |
|---|---|---|---|
| actions:atlassian/gajira-create | < 2.0.1 | 2.0.1 | |
|
|
|||