PoC Archive PoC Archive

tag

Sherlock

Critical
Sherlock CI `pull_request_target` Command Injection → GitHub Actions Secret Exfiltration (CVE-2026-44590)
CVE-2026-44590· sherlock-project/sherlock (GitHub Actions workflow validate_modified_targets.yml) patched