pentester.land· Dec 20, 2023· by Adnan Khan (@adnanthekhan)💰 Bounty: 20,000

One Supply Chain Attack to Rule Them All

Target Program: GitHub

🎯 Vulnerability: Web Security Vulnerability

💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.

#CI/CD#Supply chain attack