TI-2023-16957 CVE-2023-34111Command Injection Vulnerability in `Release PR Merged` Workflow in taosdata/grafanapluginPriority HIGH 76The `Release PR Merged` workflow in the github repo taosdata/grafanaplugin is subject to a command injection vulnerability which allows for arbitrary code execution within the github action context due to the insecure us…CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04049 · Published 2023-06-06 · No fix listed CWE-20