Files
PoC-in-GitHub/2025/CVE-2025-54594.json

39 lines
1.5 KiB
JSON

[
{
"id": 1356914060,
"name": "gha-lab-aa1cbc9bcf",
"full_name": "pvharmo2\/gha-lab-aa1cbc9bcf",
"owner": {
"login": "pvharmo2",
"id": 304171033,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/304171033?v=4",
"html_url": "https:\/\/github.com\/pvharmo2",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/pvharmo2\/gha-lab-aa1cbc9bcf",
"description": "Authorized security-research reproduction of CVE-2025-54594 (GHSA-588g-38p4-gr6x): privileged issue_comment-triggered canary release workflow checking out untrusted fork code and running its npm scripts with GITHUB_TOKEN\/NPM_TOKEN in env. Snapshot of callstackincubator\/react-native-bottom-tabs @ d765b1f695762490327dcb8f6a2f17542cf0abdb.",
"fork": false,
"created_at": "2026-09-04T08:50:43Z",
"updated_at": "2026-09-04T08:54:42Z",
"pushed_at": "2026-09-04T09:17:16Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"academic-research",
"github-actions",
"research-artifact"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]