shriyanss vulnerabilities

Products

• js-recon 1

Latest shriyanss CVEs

Newest publication first

1. CVE-2026-55378 JS Recon: Command injection in PR Branch Checker workflow via untrusted pull request context values

   Published 2026-08-28

   Critical·CVSS 9.3 EPSS 0.85%

   JS Recon is a JavaScript enumeration and SAST tool. From 1.2.1-beta.1 until 1.3.1-beta.2, the PR Branch Checker workflow in .github/workflows/pr_checker.yml places github.head_ref and github.event.pull_request.head.repo.full_name into BRANCH_NAME and SOURCE_REPO and interpolates...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.