Xygeni vulnerabilities
We track 1 vulnerability in Xygeni products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 11, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Xygeni vulnerabilities
- 9.8 Critical severity
xygeni-action: Embedded Malicious Code
xygeni-action is the GitHub Action for Xygeni Scanner. On March 3, 2026, an attacker with access to compromised credentials created a series of pull requests (#46, #47, #48) injecting obfuscated shell code into action.yml. The PRs were blocked by branch protec