Repository navigation
Security: oasdiff/oasdiff-action
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Default configuration lets a pull-request spec read files from the CI runnerGHSA-6h8r-wgc5-q3xv published
Oct 28, 2026 by reuvenharrisonHigh -
oasdiff actions resolve external $refs by default, enabling SSRF and disclosure of structured files on pull-request runsGHSA-fhj3-7267-7vv5 published
Jun 1, 2026 by reuvenharrisonHigh
Learn more about advisories related to oasdiff/oasdiff-action in the GitHub Advisory Database