python-fire: (1) PAGER+shell=True RCE in console_io.More (2) bash $(...) runs when sourcing --completion from maliciously named .py file. PoC verified. #22
Triggered via pull request
August 1, 2026 05:29
ojassharma7
ojassharma7
opened
#689
Status
Success
Total duration
24s
Artifacts
–
github_actions_scan.yml Required
on: pull_request_target