{"uuid": "ef947b1d-860e-4fa0-abc5-9d9ceccc097d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12537", "type": "seen", "source": "https://gist.github.com/dev-krish-xyz/5f4be84470b9a2c442b412e32e70e294", "content": "\n| Product | Reported By | Identifier | What Disagreed | Fixed In |\n|---|---|---|---|---|\n| claude-code-action | Novee | *Nonelocated* | Validator stripped single-quoted spans;git read them as a program path | Explicit git-push allowlist;most Bash tools removed |\n| claude-code | Novee | *Nonelocated* | Literal `/proc/self/environ` guardvs. the shell's quote removal | Step Summary output sanitized |\n| claude-code | Novee | CVE-2026-54316 | `huggingface.co` approved as a barehostname vs. every path under it | 2.1.163 |\n| Gemini CLI | Novee | CVE-2026-12537GHSA-wpqr-6v78-jr5g | `startsWith(\"run_shell_command(\")` vs. restriction inside parens;sanitized child env vs. shared PID namespace | 0.39.1run-gemini-cli 0.1.22 |\n| codex-action | Novee | Noneassigned | The prompt as the instruction channelvs. a writable `AGENTS.md` | Separate jobs, independent checkouts;`AGENTS.md` read-only |\n| claude-code-action | GMO Flatt(RyotaK) | \u2014 | `endsWith(\"[bot]\")` vs. an actualpermission check | v1.0.94 |\n", "creation_timestamp": "2026-08-08T12:06:34.341717Z"}