Toolkit Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Toolkit Project records in CISA KEV

No Toolkit Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Toolkit 1 record LOW

Records

1 record

TI-2020-12000 CVE-2020-15228 · GHSA-mfwh-5m23-j46w

Environment Variable Injection in GitHub Actions

LOW 26

In the `@actions/core` npm module before version 1.2.6,`addPath` and `exportVariable` functions communicate with the Actions Runner over stdout by generating a string in a specific format.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.01488 Published 2020-10-01 Fixed in 1.2.6 CWE-20

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0