VULNERABILITY INTELLIGENCE

CVE-2024-48908

CVSS score6.9 MEDIUM

EPSS probability0.37%

CISA KEVNot currently listed

Published2025-08-28

Last modified2026-09-26

Description

lychee link checking action checks links in Markdown, HTML, and text files using lychee. Prior to version 2.0.2, there is a potential attack of arbitrary code injection vulnerability in lychee-setup of the composite action at action.yml. This issue has been patched in version 2.0.2.