Skim-rs vulnerabilities
We track 1 vulnerability in Skim-rs products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 24, 2026.
1vulnerabilities
0critical
1high
0exploited
7.4average CVSS score
Latest Skim-rs vulnerabilities
- 7.4 High severity
skim: Improper Control of Generation of Code
Skim is a fuzzy finder designed to through files, lines, and commands. The generate-files job in .github/workflows/pr.yml checks out attacker-controlled fork code and executes it via cargo run, with access to SKIM_RS_BOT_PRIVATE_KEY and GITHUB_TOKEN (contents: