GitHub Actions pull_request_target Vulnerability Allows Secret Leakage via Fork PR

github.com 2026-06-02查看中文 →

Security AdvisoryHighGitHub

Affected:

GitHub Actions

Referenced CVEs: CVE-2026-45131 · 10.0

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Fix for missing state parameter validation in OAuth callback processing 2026-06-03 NamelessMC 2.2.4 Bypass of Private/Blocked Profile Access and Cross-Profile Write via POST 2026-06-03 OpenClaude MCP OAuth Callback State Check Bypass via error Param Leads to DoS 2026-06-03 LLM BashTool Sandbox Bypass Vulnerability (CVE-2026-62074) with POC 2026-06-03 Sandbox Bypass Fix: Patch Analysis for Trusted Approval Mechanism 2026-06-03

Offline Archive

Offline screenshot & PDF are Pro-exclusive