rlespinasse/github-slug-action · Security
github-slug-action use of `set-env` Runner commands which are processed via stdout
- GHSA ID
- GHSA-7f32-hm4h-w77q
- Severity
- medium
- Published
- Updated
Description
Impact
This GitHub Action use set-env runner commands which are processed via stdout related to GHSA-mfwh-5m23-j46w
Patches
The following versions use the recommended Environment File Syntax.
- 2.1.1
- 1.1.1
Workarounds
None, it is strongly suggested that you upgrade as soon as possible.
For more information
If you have any questions or comments about this advisory:
- Open an issue in rlespinasse/github-slug-action