Fix actions/download-artifact has an Arbitrary File Write via artifact extraction problem

imker25 / samba_exporter

A Prometheus exporter for statistic data of the samba file server.

https://imker25.github.io/samba_exporter/

Apache License 2.0

29 stars 5 forks source link

Open imker25 opened 2 weeks ago

imker25 commented 2 weeks ago

The problem descried in https://github.com/advisories/GHSA-cxww-7g56-2vh6 should be fixed by using actions/download-artifact@v4 instead of v3

imker25 commented 2 weeks ago

Fixed with d7c8373926b1856d1bab2d53ca397f1e826f38d5 Issue will be closed with V1.35.X release