PT-2024-40157 · Github · Github-Slug-Action

Published

2024-02-03

·

Updated

2024-02-03

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions: github-slug-action versions prior to 1.1.1 github-slug-action versions prior to 2.1.1
Description: The issue is related to the use of set-env runner commands processed via stdout. It is recommended to upgrade to a version that uses the Environment File Syntax.
Recommendations: For versions prior to 1.1.1, upgrade to version 1.1.1 or later. For versions prior to 2.1.1, upgrade to version 2.1.1 or later.

Related Identifiers

GHSA-7F32-HM4H-W77Q

Affected Products

Github-Slug-Action