Skip to content
GitHub Actions Scan

python-fire: (1) PAGER+shell=True RCE in console_io.More (2) bash $(...) runs when sourcing --completion from maliciously named .py file. PoC verified. #22

Sign in to view logs

python-fire: (1) PAGER+shell=True RCE in console_io.More (2) bash $(...) runs when sourcing --completion from maliciously named .py file. PoC verified.

python-fire: (1) PAGER+shell=True RCE in console_io.More (2) bash $(...) runs when sourcing --completion from maliciously named .py file. PoC verified. #22

Run time

Learn about OS pricing on GitHub Actions
Job Run time
check-changes
6s
zizmor-config
0s
zizmor-scan
0s
zizmor-upload
0s
zizmor-output
0s
6s