CVE-2026-65820

aeon is a scikit-learn compatible Python library for learning from time series.

aeon is a scikit-learn compatible Python library for learning from time series. Prior to version 1.5.0, a GitHub Actions workflow used pull_request_target for pre-commit checks on pull requests from forks. In this configuration, fork-controlled code could be checked out and executed in a privileged context. The vulnerable workflow also generated/used elevated credentials and could automatically commit or push fixes back to pull request branches. This created a potential…

11. Nov 2026

Ausgewertete Quellen

• NVD
  CVE-2026-65820