Skip to content
Threat Feed
Subscribe

Vendor

Argos

1 brief RSS
high advisory

OS Command Injection in @argos-ci/core via CI Branch Names

The @argos-ci/core package is vulnerable to OS command injection when processing unvalidated branch or reference names in environments where hasRemoteContentAccess is disabled, allowing arbitrary code execution on CI runners.

@argos-ci/core +1 ci-cd command-injection supply-chain
1t