CVEvulnerability

CVE-2026-44358

8.2 HIGH Published 2026-05-28 Modified 2026-10-26 Official page ↗
Status
Awaiting Analysis
Published
2026-05-28
Last modified
2026-10-26
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N
Weaknesses
CWE-427, CWE-829

Description

Espressif Shared GitHub DangerJS is a reusable GitHub Action CI DangerJS workflow for Espressif GitHub projects. Prior to 1.0.1, the action's entrypoint.sh invoked DangerJS from the caller's workspace after copying the fork's checkout into it, creating an untrusted search path for both binary resolution and Node.js module resolution. A fork pull request processed by a pull_request_target workflow could therefore cause fork-supplied code to execute inside the action container in place of the action's own code. This vulnerability is fixed in 1.0.1.

Related

Weakness · CWE (2)

  • CWE-427 Uncontrolled Search Path Element weakness
  • CWE-829 Inclusion of Functionality from Untrusted Control Sphere weakness

References