28
CVE: Possible Organization/Secret Compromise from dangerous CI implementation (www.cvedetails.com)
submitted 4 months ago* by to c/jellyfin@lemmy.ml
6 comments fedilink hide all child comments
 

Strange that there was no comms whatsover from the team about this

you are viewing a single comment's thread
view the rest of the comments
[–] 8 points 4 months ago*

Hasn’t it already been patched? https://github.com/jellyfin/jellyfin-ios/security/advisories/GHSA-7qhm-2m45-7fmh

Patches

CI workflows have been modified in all affected repositories, and secrets have been rotated.

Furthermore, OPs post seems to link to the patch: https://github.com/jellyfin/jellyfin-ios/commit/109217e75f38394b2f6e46e25dfe5a721203d3c8

  • permalink
  • fedilink
  • source
  • parent