CVE-2025-47271

Description

The OZI action is a GitHub Action that publishes releases to PyPI and mirror releases, signature bundles, and provenance in a tagged release. In versions 1.13.2 through 1.13.5, potentially untrusted data flows into PR creation logic. A malicious actor could construct a branch name that injects arbitrary code. This is patched in 1.13.6. As a workaround, one may downgrade to a version prior to 1.13.2.

Reserved 2025-05-05 | Published 2025-05-12 | Updated 2025-05-12 | Assigner GitHub_M

Problem types

CWE-94: Improper Control of Generation of Code ('Code Injection')

CWE-95: Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')

CWE-1116: Inaccurate Comments

Product status

>= 1.13.2, < 1.13.6
affected

References

github.com/...ublish/security/advisories/GHSA-2487-9f55-2vg9

github.com/...ommit/abd8524ec69800890529846b3ccfb09ce7c10b5c

cve.org (CVE-2025-47271)

nvd.nist.gov (CVE-2025-47271)

Download JSON