Security: saltyorg/docs
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Build PR & Deploy workflow chain runs pip install from fork-PR HEAD checkout in privileged context, exfiltrating secrets via attacker-authored setup.py / PEP 517 build hooksGHSA-wr2h-fpxm-ff4x published
Jun 15, 2026 by saltydkCritical
Learn more about advisories related to saltyorg/docs in the GitHub Advisory Database