https:/github.com/pytorch/pytorch/.github/actions vulnerabilities

Products

• https:/github.com/pytorch/pytorch/.github/actions/filter-test-configs 1

Latest https:/github.com/pytorch/pytorch/.github/actions CVEs

Newest publication first

1. GHSA-hw6r-g8gj-2987 Actions expression injection in `filter-test-configs` (`GHSL-2023-181`)

   Published 2023-08-30

   Unknown

   The pytorch/pytorch filter-test-configs workflow is vulnerable to an expression injection in Actions, allowing an attacker to potentially leak secrets and alter the repository using the workflow. Details The filter-test-configs workflow is using the raw github.event.workflow_run....

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.