VYPR

Duck Site

by Duck Organization

Source repositories

CVEs (1)

  • CVE-2026-47174CriJun 11, 2026
    risk 0.62cvss epss

    In Duck Site before version 1.0.1, the repository has a deploy workflow that runs after the build workflow completes. The build workflow runs on pull requests, while the deploy workflow runs with package-write permissions and deployment secrets. If an attacker can make a pull…