Headline
GHSA-4xqx-pqpj-9fqw: gajira-create GitHub action vulnerable to arbitrary code execution
Impact
An attacker can execute arbitrary code in the context of a GitHub runner by creating a specially crafted GitHub issue.
Patches
This issue is patched in gajira-create version 2.0.1.
Workarounds
There are no known workarounds.
References
gajira-create GitHub action vulnerable to arbitrary code execution
Critical severity GitHub Reviewed Published Oct 7, 2022 in atlassian/gajira-create • Updated Oct 7, 2022