ecosyste.ms

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

Browse Security Advisories

Low Security Advisories for pypa/gh-action-pypi-publish in actions Clear Filters

Low

2 days ago

PyPI publish GitHub Action vulnerable to injectable expression expansions in action steps GSA_kwCzR0hTQS12eG13LTdoNGYtaHF4aM4ABLqW

actions pypa/gh-action-pypi-publish

Filter by Severity

Moderate 10,310 High 8,141 Critical 3,346 Low 1,488

Filter by Ecosystem

pypi 522 maven 361 packagist 317 go 239 npm 218 nuget 118 cargo 108 rubygems 58 hex 6 actions 3 swift 2 pub 2

Filter by Package

step-security/harden-runner 1 pypa/gh-action-pypi-publish 1 Azure/setup-kubectl 1

Filter by Repository

https://github.com/pypa/gh-action-pypi-publish 1