CI/CD script injection via untrusted PR/issue body + unpinned third-party actions
March 22, 2026 · #132
TypeScript
Difficulty: Medium
Labels
good first issue security area/ci-cd
Parent Repository
clawwork-ai/ClawWork
TypeScript repository
446 46