CRITICAL10.0npmGitHub Actions
GHSA-wpqr-6v78-jr5g· CVE-2026-12537Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypasses
Modified: 9/25/2026
package
GitHub Actions/google-github-actions/run-gemini-cli
pkg:github actions/google-github-actions/run-gemini-cli