[GHSA-5j98-mcp5-4vw2] glob CLI: Command injection via -c/--cmd executes matches with shell:true #5628
Triggered via pull request
November 18, 2025 15:12
advisory-database[bot]
advisory-database[bot]
closed
#6433
Status
Failure
Total duration
1m 2s
Artifacts
–
delete_staging_and_head_branches.yaml
on: pull_request_target
delete-staging-and-head-branches
56s
Annotations
1 error
|
delete-staging-and-head-branches
Process completed with exit code 1.
|