appsec.fyi · Sources

securitylab.github.com

5 curated AppSec resources from securitylab.github.com across 4 topics on appsec.fyi.

securitylab.github.com

Resources curated from this publisher and indexed across appsec.fyi topic pages. Last item added: 2026-04-22.

Supply Chain 2 Mobile 1 RCE 1 SSTI 1
Date Added Resource Excerpt
2026-04-22 2026Keeping Your GitHub Actions Secure Part 1: Preventing Pwn RequestsSupply ChainKeeping Your GitHub Actions Secure Part 1: Preventing Pwn Requests
2026-04-11 2026SQL injection vulnerabilities in Owncloud Android appMobileSQL injection vulnerabilities in Owncloud Android app
2026-04-10 2026GitHub Security Lab: SSTI in Apache Camel — CVE-2020-11994SSTIGitHub Security Lab: SSTI in Apache Camel — CVE-2020-11994
2026-04-10 2026Command Injection and RCE in MetaSpore (GHSL-2025-035 to 037)RCECommand Injection and RCE in MetaSpore (GHSL-2025-035 to 037)
2024-07-23 2024Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requestsSupply ChainIn this article, we’ll discuss some common security malpractices for GitHub Actions and workflows, and how to best avoid them. Our examples are based on real-world GitHub workflow implementation vulne...