Critical severity9.8NVD Advisory· Published Nov 9, 2020· Updated Jun 17, 2026

CVE-2020-14188

Description

The preprocessArgs function in the Atlassian gajira-create GitHub Action before version 2.0.1 allows remote attackers to execute arbitrary code in the context of a GitHub runner by creating a specially crafted GitHub issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
atlassian/gajira-createGitHub Actions	< 2.0.1	2.0.1

Affected products

Atlassian/Jira Create
cpe:2.3:a:atlassian:jira_create:*:*:*:*:*:*:*:*
Range: <2.0.1
ghsa-coords
pkg:github/atlassian/gajira-create
Range: < 2.0.1
Atlassian/gajira-createcpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-4xqx-pqpj-9fqwghsaADVISORY
github.com/atlassian/gajira-create/security/advisories/GHSA-4xqx-pqpj-9fqwnvdThird Party AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2020-14188ghsaADVISORY

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000