CVE-2020-14188

CRITICAL 9.8CVE-2020-14188 · Published 09/11/2020 · updated 17/06/2026

In short

CVE-2020-14188 is a CRITICAL (CVSS 9.8) vulnerability affecting jira create (atlassian).
Chance of exploitation in the next 30 days (EPSS): 2.9%, higher than 86.8% of all vulnerabilities.
Fix: update to 2.0.1 or later.

Package	Affected versions	Patched versions
jira create atlassian	`< 2.0.1`	`2.0.1`

Description

The preprocessArgs function in the Atlassian gajira-create GitHub Action before version 2.0.1 allows remote attackers to execute arbitrary code in the context of a GitHub runner by creating a specially crafted GitHub issue.

References

atlassian/gajira-create security advisory · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free