CVE WATCH / VULNERABILITY DETAIL
CVE-2026-83493
CRITICALCVSS 9.1NVD feed
Published 6 November 2026 · tracked since 6 November 2026
Description
A flaw was found in distributed-workloads. A remote attacker could exploit a vulnerability in the pull_request_target workflow by submitting a specially crafted pull request. This workflow processes untrusted code from the pull request author while operating with the base repository's sensitive secr
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-17278 CRITICAL 9.8
- CVE-2026-17167 MEDIUM 4.3
- CVE-2026-120043 HIGH 7.5
- CVE-2026-119167 HIGH 7.2
- CVE-2026-110534 MEDIUM 6.4
- CVE-2026-19803 CRITICAL 9.8
- CVE-2026-121516 MEDIUM 6.1
- CVE-2026-120739 HIGH 7.2
- CVE-2026-120677 HIGH 7.2
- CVE-2026-120560 MEDIUM 6.5