Issue 2070: Github: Widespread injection vulnerabilities in Actions
→ bugs.chromium.org/p/project-zero/issues/detail?id=2070&can=2…
Example how env could be used to disclose information
Tagged security
The PGP problem
→ latacora.micro.blog/2019/07/16/the-pgp-problem.html
PGP is not the right tool for the job.
gwillem/magevulndb: Central repository for third party Magento extensions with known security issues.
→ github.com/gwillem/magevulndb
List of vurnable Magento modules.