Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2025-32111

The Docker image from acme.sh before 40b6db6 is based on a .github/workflows/dockerhub.yml file that lacks "persist-credentials: false" for actions/checkout.

Description

The Docker image from acme.sh before 40b6db6 is based on a .github/workflows/dockerhub.yml file that lacks "persist-credentials: false" for actions/checkout.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

acme.sh project acme.sh

Default version status: unaffected

  • 0 to < 40b6db6a2715628aa977ed1853fe5256704010aeaffected

References