Skip to content
Threat Feed

Tag

Actions

1 brief RSS
medium threat

GitHub Actions GITHUB_TOKEN Disclosure via Composer Validation Failure

Composer leaks GitHub OAuth tokens in GitHub Actions logs if they do not match the expected format due to a validation regex, leading to potential unauthorized access.

github.com github actions composer token-leak cve-2026-45793
2r 1t