{
  "affected": [
    {
      "database_specific": {
        "last_known_affected_version_range": "\u003c= 0.24.0"
      },
      "package": {
        "ecosystem": "GitHub Actions",
        "name": "Tiryoh/actions-mkdocs"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.25.0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [],
  "database_specific": {
    "cwe_ids": [
      "CWE-77"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2026-04-04T06:03:06Z",
    "nvd_published_at": null,
    "severity": "MODERATE"
  },
  "details": "### Summary\n\nExternal input from `github.event.issue.title` is used unsafely in a shell command in `.github/workflows/release-candidate.yaml`, allowing command injection during workflow execution.\n\n### Details\n\nIn `.github/workflows/release-candidate.yaml`, the issue title is interpolated directly into a shell command:\n\n```\nexport VERSION=$(echo ${{ github.event.issue.title }} | sed -E \u0027s/Release v?([0-9\\.]*)/\\1/g\u0027)\n```\n\nBecause the issue title is attacker-controlled and is embedded directly into a shell command, shell metacharacters such as command substitution (`$()`) and command separators (`;`) can be interpreted by the shell.\n\nAlthough the workflow checks that the title starts with `Release `, this condition can still be satisfied by a maliciously crafted input.\n\n### PoC\n\n1. Create or edit an issue with the following title:\n\n   ```\n   Release v1.2.3 $(whoami)\n   ```\n\n2. Trigger the workflow that processes the issue.\n\n3. Observe that the injected command is executed on the runner.\n\nThe workflow logs show that `$(whoami)` is evaluated and its output (`runner`) appears in the command result, confirming that attacker-controlled input is executed within the shell.\n\n\u003cimg width=\"633\" height=\"380\" alt=\"\u1109\u1173\u110f\u1173\u1105\u1175\u11ab\u1109\u1163\u11ba 2026-03-27 \u110b\u1169\u1112\u116e 8 33 43\" src=\"https://github.com/user-attachments/assets/90b38dab-8c53-4a13-8302-158ac5acf051\" /\u003e\n\n\n### Impact\n\nThis vulnerability allows command injection in the GitHub Actions runner through attacker-controlled issue titles. An attacker may be able to execute arbitrary commands within the context of the affected workflow job.\n\nDepending on the workflow configuration (such as permissions and available secrets), successful exploitation could lead to:\n\n* Unauthorized command execution in the CI environment\n* Misuse of the `GITHUB_TOKEN`\n* Modification of repository state, release artifacts, or other workflow outputs\n\nIf the repository is public and allows untrusted users to create or reopen issues that trigger the workflow, this may be exploitable by external users.\n\nThis issue is limited to the repository\u0027s internal workflow configuration and does not directly affect downstream users of the published `actions-mkdocs` GitHub Action.",
  "id": "GHSA-6p2j-742g-835f",
  "modified": "2026-04-04T06:03:06Z",
  "published": "2026-04-04T06:03:06Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/Tiryoh/actions-mkdocs/security/advisories/GHSA-6p2j-742g-835f"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/Tiryoh/actions-mkdocs"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
      "type": "CVSS_V3"
    }
  ],
  "summary": "actions-mkdocs: Command Injection via issue title in internal GitHub Actions workflow"
}