Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
Animats
on Nov 3, 2020
|
parent
|
context
|
favorite
| on:
GitHub: Widespread Injection Vulnerabilities in Ac...
As the runner process parses every line printed to STDOUT looking for workflow commands, every Github action that prints untrusted content as part of its execution is vulnerable.
What could possibly go wrong?
Consider applying for YC's Spring batch! Applications are open till Feb 11.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
What could possibly go wrong?