Detected GitHub Actions context data flowing into a command execution function. GitHub Actions context can contain attacker-controlled data such as issue titles, PR descriptions, branch names, etc.
A few days ago, developer Felix Krause shared a detailed report on how mobile apps can use their own in-app web browser to track user data. Now Krause is back with a new tool that lets anyone see ...