{"uuid": "5a19da26-38e5-4de7-8dcb-77795e710e49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54316", "type": "seen", "source": "https://gist.github.com/dev-krish-xyz/7604ca4e2ca8081e4e1481b4aa8e3585", "content": "\n| Product | Identifier | What Disagreed | Fixed In |\n|---|---|---|---|\n| claude-code-action | *None located* | Validator stripped single-quoted spans;git read them as a program path | Explicit git-push allowlist;most Bash tools removed |\n| claude-code | *None located* | Literal `/proc/self/environ` guardvs. the shell's quote removal | Step Summary output sanitized |\n| claude-code | CVE-2026-54316 | `huggingface.co` approved as a barehostname vs. every path under it | 2.1.163 |\n| Gemini CLI | CVE-2026-12537GHSA-wpqr-6v78-jr5g | `startsWith(\"run_shell_command(\")` vs. restriction inside parens;sanitized child env vs. shared PID namespace | 0.39.1run-gemini-cli 0.1.22 |\n| codex-action | None assigned | The prompt as the instruction channelvs. a writable `AGENTS.md` | Separate jobs, independent checkouts;`AGENTS.md` read-only |\n| claude-code-action | \u2014 | `endsWith(\"[bot]\")` vs. an actualpermission check | v1.0.94 |\n", "creation_timestamp": "2026-08-08T12:00:31.324584Z"}