CyberSecBulletin

LiuWoodsCode vulnerabilities

We track 1 vulnerability in LiuWoodsCode products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on December 28, 2022.

1vulnerabilities
0critical
1high
0exploited
7.8average CVSS score

Latest LiuWoodsCode vulnerabilities

  • 7.8 High severity

    LiuOS: Authorization Bypass Through User-Controlled Key

    CVE-2022-46179LiuWoodsCode

    LiuOS is a small Python project meant to imitate the functions of a regular operating system. Version 0.1.0 and prior of LiuOS allow an attacker to set the GITHUB_ACTIONS environment variable to anything other than null or true and skip authentication checks.