githubtoplanguages: Command Injection via Issue Title in Discord Notification Workflow
### Summary A GitHub Actions workflow is vulnerable to command injection through the issue title. The workflow is trig
#actions
共收录 3 条相关情报。
← 返回所有主题Setup PHP: GitHub tokens configured by setup-php may be exposed through pinned affected Composer versions
### Impact This affects only workflows that pin an exact affected Composer semver version through setup-php, for example
Setup PHP: Command Injection in Repository-Derived PHP Version Resolution
CVE-2026-46420
### Summary A command injection vulnerability was identified in `shivammathur/setup-php` when the action resolves the P