PT-2026-57860 · Undefined · Undefined
CVE-2026-61706
·
Published
2026-07-13
·
Updated
2026-07-13
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
New CVE: CVE-2026-61706 in https://t.co/9nnkxgAVbP. Textbook GitHub Actions script injection. The action dropped the PR title straight into a bash step: PR TITLE="${{ github.event.pull request.title }}"Name your PR $(something) and it runs on the runner. #CVE #appsec https://t.co/61YxitkMez
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Undefined