shivammathur/setup-php
GitHub Actions · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Setup PHP: Command Injection in Repository-Derived PHP Version Resolution | shivammathur/setup-php | GitHub Actions | Medium | Fix reported | |
| Setup PHP: GitHub tokens configured by setup-php may be exposed through pinned affected Composer versions | shivammathur/setup-php | GitHub Actions | Medium | Fix reported |