To report a vulnerability in prek-action, open a private vulnerability report and you can create a patch on a private fork or, after reporting the problem, our maintainers will fix it as soon as possible.
Security: j178/prek-action
Security
SECURITY.md
- Arbitrary code injection in composite actionGHSA-pwf7-47c3-mfhx published
Sep 27, 2025 by j178Critical
Learn more about advisories related to j178/prek-action in the GitHub Advisory Database