Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2025-47928: Secrets Exfiltration via pull_request_target in GitHub Actions

github.com 2025-05-17 查看中文 →
Security Advisory CVE-2025-47928 Critical spotipy
Affected:
  • spotipy@4f5759dbfb4506c7b628057
  • spotipy@2a4db1aabcb1ac778d
Fixed in:
  • spotipy@9dfb7177b8d7bb98a5a6014f
  • spotipy@8e6436812a47576f
Referenced CVEs: CVE-2025-47928 · 9.1
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.
More from this source
ipTIME T16000M Router Pre-Auth RCE via Hidden Debug Interface /sess-bin/d.cgi with PoC 2026-08-24 ipTIME T16000M Router Auth Bypass and Arbitrary Password Reset Vulnerability Analysis with PoC 2026-08-24 Apache Kafka UI v0.7.2 Remote Code Execution (RCE) Vulnerability and POC 2026-08-24 libmics LECP Buffer Overflow via Write-Before-Check in cbor array 2026-08-24 libsockets lecp_parse CBOR Write-Before-Check OOB Write POC 2026-08-24
Offline Archive

Offline screenshot & PDF are Pro-exclusive

Upgrade to Pro