Critical severity9.8NVD Advisory· Published Nov 9, 2020· Updated Jun 17, 2026
CVE-2020-14189
CVE-2020-14189
Description
The execute function in in the Atlassian gajira-comment GitHub Action before version 2.0.2 allows remote attackers to execute arbitrary code in the context of a GitHub runner by creating a specially crafted GitHub issue comment.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3<2.0.2+ 1 more
- (no CPE)range: <2.0.2
- (no CPE)range: unspecified
Patches
Vulnerability mechanics
References
1- github.com/atlassian/gajira-comment/security/advisories/GHSA-hj6w-pm28-h8hfnvdThird Party Advisory
News mentions
0No linked articles in our index yet.