GCVE - cpe:2.3:a:saltyorg:docs:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:saltyorg:docs:*:*:*:*:*:*:*:*

part: a version: * update: *

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-55675`	vulnerable	2026-11-03 10:16:34.215574	Salty documentation workflow executes fork-controlled Python build hooks with deployment secrets CRITICAL (10) The Salty documentation repository builds and deploys the docs.saltbox.dev website. Prior to commit 649c9aea2daef1168eeb0415b44e65dbbde9f220, .github/workflows/trigger-pr-build.yml records an untrusted fork commit in the pr_info artifact, and the secret-bearing workflow_run job in .github/workflows/build-pr.yml checks out that commit before running pip install -r requirements.txt. A fork pull request can therefore supply attacker-authored setup.py or PEP 517 build hooks whose installation code executes in the privileged base-repository workflow with CF_API_TOKEN, GH_TOKEN, MKDOCS_GIT_COMMITTERS_APIKEY, and a write-capable GITHUB_TOKEN, allowing secret disclosure and follow-on compromise. The vulnerability is not caused by the repository-fork guard, and the demonstrated path requires attacker control of fork content rather than merely the artifact metadata. This vulnerability is fixed with commit 649c9aea2daef1168eeb0415b44e65dbbde9f220. Published: 2026-10-13T15:15:25.023Z Updated: 2026-10-13T16:22:51.021Z Open on db.gcve.eu Reference links https://github.com/saltyorg/docs/security/advisories/GHSA-wr2h-fpxm-ff4x https://github.com/saltyorg/docs/commit/649c9aea2daef1168eeb0415b44e65dbbde9f220	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.