28
CVE: Possible Organization/Secret Compromise from dangerous CI implementation (www.cvedetails.com)
submitted 4 months ago* by to c/jellyfin@lemmy.ml
6 comments fedilink hide all child comments
 

Strange that there was no comms whatsover from the team about this

you are viewing a single comment's thread
view the rest of the comments
[–] 10 points 4 months ago*

Note: This is not a code vulnerability, but a vulnerability in the GitHub Actions workflows. No new version is required for this GHSA and end users do not need to take any actions.

From the article

However maybe it's time to going back to build from source.

  • permalink
  • fedilink
  • source
    •