@E2E Dev/Github
Approved changes feed: RSS · Atom
cpe:2.3:a:tester-army:@e2e-dev/github:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Tester Army (95487027-88c7-54c8-a005-df9ec8d41f83) |
|---|---|
| Product | @E2E Dev/Github (fc5b9164-5a9c-5ae1-a42a-73f31ac34e18) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-113357 |
vulnerable | 2026-11-03 10:16:27.729386 |
@e2e-dev/github before 0.4.1 CI Report Hijacking via Predictable Comment Marker
LOW (3.5)
@e2e-dev/github before 0.4.1 contains an improper authorization vulnerability that allows pull request commenters to hijack CI test reports by posting comments with the predictable marker. Because findComment and upsertComment in post.ts never check the comment author, attackers can receive results in their own comment and edit failures to passes, or suppress genuine reports entirely.
Published: 2026-10-20T10:41:41.607Z
Updated: 2026-10-20T13:42:52.211Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.