Skip to content

CVE record · 1 source

CVE-2026-113357

CVSS 3.5

@e2e-dev/github before 0.4.1 contains an improper authorization vulnerability that allows pull request commenters to hijack CI test reports by…

Vendor: GitHub
Product: github
CVSS: 3.5

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

0

CVE NVD 11d ago

@e2e-dev/github before 0.4.1 contains an improper authorization vulnerability that allows pull request commenters to hijack CI test reports by…

@e2e-dev/github before 0.4.1 contains an improper authorization vulnerability that allows pull request commenters to hijack CI test reports by posting comments with the predictable marker. Because findComment and upsertComment in…

CVSS 3.5 CVE-2026-113357 GitHub