zizmor vulnerabilities

1 known vulnerability in zizmor from Zizmorcore. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.0 High severity

  zizmor: Insertion of Sensitive Information into Log File

  CVE-2026-102289Nov 9, 2026Zizmorcore

  zizmor is a static analysis tool for CI/CD systems. In version 1.27.0, debug logging serializes the parsed application configuration with a derived Debug implementation for GitHubToken, causing credentials supplied through GH_TOKEN, GITHUB_TOKEN, ZIZMOR_GITHUB