Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix actions/download-artifact has an Arbitrary File Write via artifact extraction problem #139

Closed
imker25 opened this issue Sep 5, 2024 · 2 comments
Closed

Fix actions/download-artifact has an Arbitrary File Write via artifact extraction problem #139

imker25 opened this issue Sep 5, 2024 · 2 comments
Assignees
@imker25
Labels
bug Something isn't working

Comments

@imker25
Copy link
Owner

imker25 commented Sep 5, 2024

The problem descried in GHSA-cxww-7g56-2vh6 should be fixed by using actions/download-artifact@v4 instead of v3
@imker25 imker25 added the bug Something isn't working label Sep 5, 2024
@imker25 imker25 self-assigned this Sep 5, 2024
imker25 added a commit that referenced this issue Sep 5, 2024
@imker25
fix: Update download-artifact action from v3 to v4, Issue #139 (MR #140)
d7c8373 
* Update download-artifact action from v3 to v4 Issue #139
@imker25
Copy link
Owner Author

imker25 commented Sep 5, 2024

Fixed with d7c8373
Issue will be closed with V1.35.X release

@imker25
Copy link
Owner Author

imker25 commented Nov 10, 2024

Fixed with v1.35.5

@imker25 imker25 closed this as completed Nov 10, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@imker25 imker25

Labels
bug Something isn't working
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@imker25