log-issue-events.yml fragile shell escaping for ISSUE_TITLE (potential injection vector)
Status Closed — not planned
Maintainer reply None cached
Activity 2 comments · opened May 23, 2026 · closed Jun 23, 2026
Bug\n\n.github/workflows/log-issue-events.yml line 34 has shell escaping that could break on issue titles with special characters like backticks, dollar signs, or newlines. This is a potential shell injection vector.
This issue has 2 comments on GitHub. Read the full discussion on GitHub ↗