CodeQL Wall of Fame
Join us in our mission to improve open source security for all
454
vulnerabilities found
with the help of CodeQL
The GitHub Security Lab uses CodeQL to perform
variant analysis, an important technique for identifying new types
of security vulnerabilities of a given class. The Security Lab and
its community shares its knowledge with developers, to benefit
both open source and commercial organizations.
The CodeQL Wall of Fame is a (non-exhaustive) list of
vulnerabilities that the GitHub Security Lab and our community
have found using CodeQL. In most cases these vulnerabilities were
detected as a direct result of a query launch. In other cases,
CodeQL was used to explore the codebase faster and accelerate the
manual audit.
Take action
Want to join us in our mission to improve open source security for all? Choose your own adventure to get started:
Get featured
Did you find a new CVE thanks to CodeQL? Open a submission to
see your work displayed on the CodeQL Wall of Fame.
Secure your code
You are one click away to benefit from the power of CodeQL on
your open source codebase. For private code, contact sales.
Learn CodeQL
Dive into our Capture the Flag challenges designed to sharpen
your abilities while mastering CodeQL.
Featured disclosures
May 22, 2026
Checking out of untrusted code in benchmarks.yml workflow may lead to code execution in privileged runner
April 3, 2026
The PraisonAI repository was vulnerable to code injection in the claude-code-action GitHub Actions workflow (GHSL-2025-093).
December 19, 2025
A code injection vulnerability was identified in the then latest changeset of vets-api's GitHub Actions workflow (ready_for_review.yml), which could have allowed unauthorized code execution during workflow runs.
All advisories
Since March 2020
2026
GHSL-2024-200_GHSL-2024-201: Zero click RCE in Uptrain - CVE-2025-27771, CVE-2025-27772
The Uptrain dashboard lacks significant authentication, has an open CORS policy, and is vulnerable to a remote code execution vulnerability. Combining these primitives, an attacker can get zero click remote code execution in the context of the Uptrain host by directing an Uptrain user to a specially crafted website.
GHSL-2024-198_GHSL-2024-199: Zero click RCE in Uptrain - CVE-2025-27621, CVE-2025-27770
The Uptrain dashboard lacks significant authentication, has an open CORS policy, and is vulnerable to a remote code execution vulnerability. Combining these primitives, an attacker can get zero click remote code execution in the context of the Uptrain host by directing an Uptrain user to a specially crafted website.
GHSL-2024-196: Remote Code Execution (RCE) in Fooocus webui - CVE-2025-31114
The Fooocus webui is vulnerable to remote code execution due to unsafe use of eval when processing metadata json. An attacker with access to Foocus webui page may be able to execute arbitrary code on the instance.
GHSL-2025-009: Arbitrary Code Execution in Mesa benchmarks.yml workflow - CVE-2026-29075
Checking out of untrusted code in benchmarks.yml workflow may lead to code execution in privileged runner
GHSL-2024-293: Arbitrary File Read on get_log_file REST API in Apache Doris
The get_log_file REST API allows user with Admin privilege to read arbitrary files on the server
GHSL-2025-093: Code Injection in PraisonAI claude-code-action GitHub Actions Workflow
The PraisonAI repository was vulnerable to code injection in the claude-code-action GitHub Actions workflow (GHSL-2025-093).
2025
GHSL-2025-105: Code injection in vets-api
A code injection vulnerability was identified in the then latest changeset of vets-api's GitHub Actions workflow (ready_for_review.yml), which could have allowed unauthorized code execution during workflow runs.
GHSL-2025-102_GHSL-2025-103: Code injection in acl-anthology
The latest changeset of acl-anthology was vulnerable to code injection in two GitHub Actions workflows, link-to-checklist and print-info, which could have allowed attackers to execute arbitrary commands during CI processes.
GHSL-2025-106: Code Injection in esphome/esphome-docs Github Actions Workflow
A code injection vulnerability exists in the latest main branch of esphome/esphome-docs, where the .github/workflows/component-image.yml Github Actions workflow allows attackers to execute arbitrary code with privileged context. This flaw could enable unauthorized access or compromise of the CI environment.
GHSL-2025-104: Arbitrary command execution within the CI environment in Weaviate
The Weaviate repository was vulnerable to code injection in its Github Actions notifier.yml as of the latest changeset at the time of the review, which potentially could have allowed attackers to execute arbitrary commands within the CI environment.
GHSL-2025-099: Arbitrary code execution in cross-platform-actions/action
The cross-platform-actions/action repository was vulnerable to a code injection issue in its release.yml workflow, affecting the latest changeset at the time of review. This vulnerability could potentially have allowed an attacker to inject and execute arbitrary code within the context of the workflow.
GHSL-2024-325_GHSL-2024-326: Poisoned Pipeline execution via Code Injection and Execution of untrusted code in Actual
The update-vrt.yml workflow is vulnerable to Poisoned Pipeline execution via Code Injection and Execution of untrusted code
GHSL-2025-094: code execution in a privileged context in a GitHub workflow of faststream
The GitHub Actions workflow pr_autoupdate.yaml checks out untrusted code, potentially allowing attackers to execute arbitrary code in a privileged context.
GHSL-2025-090: Code injection in Github Actions with privileged context in harvester
Improper handling of inputs in GitHub Actions with privileged context could allow attackers to execute arbitrary code.
GHSL-2025-101: Code injection in a GitHub Actions workflow of homeassistant-tapo-control - CVE-2025-55192
The homeassistant-tapo-control repository was vulnerable to code injection in the issues.yml GitHub Actions workflow.
GHSL-2025-091: Code injection vulnerability in a GitHub Actions workflow of ansys/pymapdl
A code injection vulnerability was identified in the GitHub Actions workflow migrator.yml of the ansys/pymapdl project on the latest main branch, enabling potential attackers to execute arbitrary code with privileged context and leak repository secrets. This could lead to unauthorized access, exposure of sensitive information, and further exploitation.
GHSL-2025-084: Untrusted code in Github Actions workflow may lead to secret leak in int128/datadog-actions-metrics
The int128/datadog-actions-metrics project is vulnerable in its latest main branch due to improper validation in a GitHub Actions workflow, where checking out untrusted code could potentially lead to secret leakage.
GHSL-2025-082: Unauthorized code execution in ag-grid
The performance workflow in the ag-grid/ag-grid project’s latest branch is vulnerable to unauthorized code execution due to the insecure checkout of untrusted code in GitHub Actions, potentially exposing secrets and compromising the privileged context.
GHSL-2025-089: Potential code execution in privileged context in YDB
A code injection vulnerability (GHSL-2025-089) was identified in the validate-pr-description GitHub Actions workflow of the ydb-platform/ydb project on the latest main branch, allowing attackers to execute arbitrary code by manipulating input processed by the workflow.
GHSL-2025-087: Potential code execution in high privilege context in PX4-Autopilot
A code injection vulnerability was identified in the PX4/PX4-Autopilot project within the docs_pr_comment.yml GitHub Actions workflow on the latest main branch. An attacker could exploit this issue in a privileged context to execute arbitrary code, potentially compromising the CI/CD pipeline.
GHSL-2025-077: Potential code execution in privileged runner in Beeware
The beeware/beeware.github.io project is vulnerable in its CI pipeline (ci.yml) to untrusted actions checkout, potentially allowing supply chain attacks.
GHSL-2025-006: Potential code execution in privileged runner in Home Assistant PowerCalc
Checking out of untrusted code in validate-lut-files.yml workflow may lead to code execution in privileged runner
GHSL-2025-049_GHSL-2025-053: Remote Code Execution (RCE) in GPT-SoVITS - CVE-2025-49837, CVE-2025-49838, CVE-2025-49839, CVE-2025-49840, CVE-2025-49841
GPT-SoVITS is vulnerable to multiple unsafe deserializations, which lead to remote code execution.
GHSL-2025-045_GHSL-2025-048: Command injection in GPT-SoVITS - CVE-2025-49833, CVE-2025-49834, CVE-2025-49835, CVE-2025-49836
GPT-SoVITS is vulnerable to multiple command injections.
GHSL-2024-281: Actions expression injection in Ant-design-web3
Ant-design-web3 is vulnerable to Actions expression injection allowing an attacker to alter the repository and steal secrets.
GHSL-2024-276: Actions expression injection in Ant-design-blazor
Ant-design-blazor is vulnerable to Actions expression injection allowing an attacker to alter the repository and steal secrets.
GHSL-2024-182_GHSL-2024-186: Several vulnerabilities (RCE, XSS) in Camaleon CMS - CVE-2024-46986, CVE-2024-46987
Several vulnerabilities were found in Camaleon CMS. Three vulnerabilities (GHSL-2024-182, GHSL-2024-183, GHSL-2024-184) can be exploited by "normal" authenticated users. Camaleon CMS instances where self-registration is enabled (e.g. to leave comments on posts) are especially endangered by these vulnerabilities.
GHSL-2024-341_GHSL-2024-353: 13 vulnerabilities found in Applio - CVE-2025-27774 to CVE-2025-27786
Applio 3.2.7 is vulnerable to unsafe deserialization, SSRFs and arbitrary file writes, arbitrary file read and arbitrary file removal.
GHSL-2024-208: Poisoned Pipeline Execution (PPE) in Apache Superset
Apache Superset is vulnerable to a Poisoned Pipeline Execution (PPE) attack which may lead to a full compromise of the apache/superset repository.
GHSL-2024-277: Actions expression injection in Appsmith
Appsmith is vulnerable to Actions expression injection allowing an attacker to alter the repository and steal secrets.
GHSL-2024-274_GHSL-2024-275: Script injection in Cilium GitHub Actions workflows
Cilium push-chart-ci.yaml and build-images-base.yaml workflows are vulnerable to script injection.
GHSL-2024-323: Denial of Service (DoS) in snapcraft
A snap with a crafted yaml file can cause a Denial of Service (DoS) in snapcraft.
GHSL-2024-273: ReDoS in remove_html_tags of Gradio
remove_html_tags uses a regex that has a ReDoS vulnerability.
GHSL-2024-327: Poisoned Pipeline Execution (PPE) in Microsoft FluentUI
The pr-website-deploy-comment workflow of Microsoft FluentUI is vulnerable to Poisoned Pipeline Execution (PPE).
GHSL-2024-254: Poisoned Pipeline Execution (PPE) in Amplification leading to potential acccount takeover
Amplification is vulnerable to Poisoned Pipeline Execution (PPE) allowing malicious actors to take over the repository.
GHSL-2024-303: Code execution in trusted context via a GitHub Action of Tribler
Checking out of untrusted branch allows code execution in trusted context in the pr-comment-validate Action
2024
GHSL-2024-288: Open redirect in Sickchill - CVE-2024-53995
Sickchill is vulnerable to an open redirect vulnerability.
GHSL-2024-173: Environment Variable injection in a Feign GitHub Actions workflow
Feign's comment-pr.yml workflow is vulnerable to Environment Variable injection which may lead to Repository takeover.
GHSL-2024-312: Arbitrary code execution and secret exfiltration in Azure API Management Developer Portal
Secret exfiltration on GitHub's Azure/api-management-developer-portal repository.
GHSL-2024-294: Environment variable injection leading to potential secret exfiltration and privilege escalation in Azure/cli
Azure/azure-cli is vulnerable to Environment Variable Injection which may allow a malicious actor to exfiltrate the CLI_BOT secret.
GHSL-2024-109_GHSL-2024-111: Reflected Cross-Site Scripting (XSS) vulnerabilities in habitica
Multiple reflected XSS vulnerabilities exist in the registration and login forms of habitica, giving the attacker control of the victim's account when a victim registers or logins with a specially crafted link.
GHSL-2024-338: Code Injection in Angular JA’s Actions workflow
angular/angular-ja repository is vulnerable to a code injection in its adev-preview-deploy.yml workflow which may an attacker to gain write permissions for the pull_request scope and leak the Firebase token.
GHSL-2024-314: Poisoned Pipeline Execution (PPE) in AWS Karpenter Provider
aws/karpenter-provider-aws repository is vulnerable to Poisoned Pipeline Execution (PPE) which may lead to AWS Key exfiltration
GHSL-2024-313: Poisoned Pipeline Execution (PPE) in Marimo
Marimo is vulnerable to Poisoned Pipeline Execution (PPE) which may allow an attacker to get write permissions to the repository and exfiltrate secrets such as TURBO_TOKEN or NPM_TOKEN
GHSL-2024-305: Information disclosure via PlexRipper’s open CORS policy - CVE-2024-49763
PlexRipper's open CORS policy allows attackers to gain sensitive information from PlexRipper by getting the user to access the attacker's domain.
GHSL-2024-266_GHSL-2024-267: Poisoned Pipeline Execution via Environment Variable Injection in Adobe React Spectrum Charts
Adobe's react-spectrum-charts GitHub repository is vulnerable to Poisoned Pipeline Execution via Environment Variable Injection in its pr-sonar.yml workflow. A malicious actor could gain full-write permissions to the repository and access to the https://github/adobe organization secrets.
GHSL-2024-264_GHSL-2024-265: Regular Expression Denial of Service (ReDoS) vulnerabilities in aws-cli
aws-cli has two regexes with ReDoS vulnerabilities.