Description (CNA)
lychee link checking action checks links in Markdown, HTML, and text files using lychee. Prior to version 2.0.2, there is a potential attack of arbitrary code injection vulnerability in lychee-setup of the composite action at action.yml. This issue has been patched in version 2.0.2.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| lycheeverse / lychee-action | affected < 2.0.2 |
CWE
CWE-94
References
- https://github.com/lycheeverse/lychee-action/security/advisories/GHSA-65rg-554r-9j5x
- https://github.com/lycheeverse/lychee-action/commit/7cd0af4c74a61395d455af97419279d86aafaede
ADP enrichment
No English description supplied.
No references supplied.