github-slug-action use of `set-env` Runner commands which are processed via stdout
Moderate severity
GitHub Reviewed
Published
Oct 7, 2020
in
rlespinasse/github-slug-action
•
Updated Feb 3, 2024
Package
Affected versions
<= 1.1.0
>= 2.0.0, <= 2.1.0
Patched versions
1.1.1
2.1.1
Description
Published to the GitHub Advisory Database
Feb 3, 2024
Reviewed
Feb 3, 2024
Last updated
Feb 3, 2024
Credits
-
hsblhsn Analyst
-
rlespinasse Remediation developer
Impact
This GitHub Action use
set-envrunner commands which are processed via stdout related to GHSA-mfwh-5m23-j46wPatches
The following versions use the recommended Environment File Syntax.
Workarounds
None, it is strongly suggested that you upgrade as soon as possible.
For more information
If you have any questions or comments about this advisory:
References