VYPR

Actions Toolkit

by GitHub

CVEs (1)

  • CVE-2024-42471HigSep 2, 2024
    risk 0.44cvss 7.3epss 0.03

    actions/artifact is the GitHub ToolKit for developing GitHub Actions. Versions of `actions/artifact` on the 2.x branch before 2.1.2 are vulnerable to arbitrary file write when using `downloadArtifactInternal`, `downloadArtifactPublic`, or `streamExtractExternal` for extracting…