Vulnerability in Duck-organization Duck-site
CVE-2026-47174
In Duck Site before version 1.0.1, the repository has a deploy workflow that runs after the build workflow completes. The build workflow runs on pull requests, while the deploy workflow runs with package-write permissions and deployment se…
EPSS: 0.003 (23.5th percentile) — read the EPSS interpretation.
Affected products
- Duck-organization Duck-site — versions < 1.0.1
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)