Unverified50% confidenceCautionExact time
When using StringLike with a wildcard such as repo:my-org/my-repo*, an attacker could create a repository named my-org/my-repo-malicious to satisfy the condition.
1
Sources
50%
Confidence
Long-term
Relevance
9/5/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedPHP生态中类似的反序列化攻击被称为POP（Property-Oriented Programming）链，利用unserialize()函数和__wakeup()、__destruct()等魔术方法构造攻击路径60% similarUnverified即使是 tailnet 中的唯一用户也可能受该漏洞影响，因为链式漏洞可组合利用构成完整攻击链58% similarUnverifiedQR code access carries security risks including replay attacks, session credential leakage due to long-lived tokens, and man-in-the-middle attacks.58% similarUnverifiedLog4j漏洞（CVE-2021-44228）允许攻击者通过特制字符串触发JNDI查找实现无需认证的远程代码执行57% similarUnverified数据投毒攻击中，清洁标签攻击允许攻击者在不修改样本标签的情况下植入后门，特洛伊木马攻击通过特定触发词激活预设的恶意行为57% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/862134API
curl https://kongchang.com/api/v1/knowledge/claims/862134MCP
get_claim(id=862134)