Approved changes feed: RSS · Atom

cpe:2.3:a:forthebadge:for_the_badge:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorForthebadge (c949751e-a8e3-59f7-b8cf-641f89f1a4a2)
ProductFor The Badge (bdd60ab4-ec81-5e9f-a77d-150d352b9f25)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/braveux/for-the-badge purl2cpe 2026-06-01 10:10:57.812676

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-4281 vulnerable 2026-06-08 05:38:09.097971 Brave UX for-the-badge combine-prs.yml os command injection
MEDIUM (4.6)
A vulnerability was found in Brave UX for-the-badge and classified as critical. Affected by this issue is some unknown functionality of the file .github/workflows/combine-prs.yml. The manipulation leads to os command injection. The name of the patch is 55b5a234c0fab935df5fb08365bc8fe9c37cf46b. It is recommended to apply a patch to fix this issue. VDB-216842 is the identifier assigned to this vulnerability.
Published: 2022-12-26T19:38:13.757Z
Updated: 2024-08-03T17:23:10.245Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.