CVE-2026-118762 - Monkeytype: fork PR can execute code with elevated GITHUB_TOKEN
CVE ID :CVE-2026-118762 Published : Oct. 29, 2026, 5:18 p.m. | 1 hour, 7 minutes ago Description :Monkeytype is a minimalistic and customizable typing test. Prior to 26.43.0, the .github/workflows/fix-formatting.yml workflow runs on pull_request_target with repository write permissions,...