CVE-2023-28430

score

<0.1

cvss

7.3

epss

0.9%

published

2023-03-27

kev added

—

first seen

2026-10-21

OneSignal's GitHub Actions workflow triggered on issue closure contains an expression injection caused by uncontrolled data in the issue title, letting attackers take over the GitHub Runner and execute arbitrary commands, exploit requires the attacker to create a specially crafted issue title.