GitHub Actions package
rlespinasse/github-slug-action
pkg:github/rlespinasse/github-slug-action
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2023-27581 | — | >= 4.0.0, < 4.4.1 | 4.4.1 | Mar 13, 2023 | github-slug-action is a GitHub Action to expose slug value of GitHub environment variables inside of one's GitHub workflow. Starting in version 4.0.0` and prior to version 4.4.1, this action uses the `github.head_ref` parameter in an insecure way. This vulnerability can be trigge |
- CVE-2023-27581Mar 13, 2023affected >= 4.0.0, < 4.4.1fixed 4.4.1
github-slug-action is a GitHub Action to expose slug value of GitHub environment variables inside of one's GitHub workflow. Starting in version 4.0.0` and prior to version 4.4.1, this action uses the `github.head_ref` parameter in an insecure way. This vulnerability can be trigge