How severe is GHSA-hw6r-g8gj-2987?

No CVSS score has been assigned to GHSA-hw6r-g8gj-2987 yet. Review the advisory details and affected package list to assess your exposure.

How do I fix GHSA-hw6r-g8gj-2987?

The records we use list no patched version of https://github.com/pytorch/pytorch/.github/actions/filter-test-configs for GHSA-hw6r-g8gj-2987. Check the maintainer's advisory, and where your build allows, override or pin the dependency away from the vulnerable range.

How do I mitigate GHSA-hw6r-g8gj-2987 if there is no patch (or I can't update yet)?

If you can't upgrade right away: gate or disable the affected feature, validate untrusted input at the boundary, and avoid passing attacker-controlled data into the vulnerable path. O3's runtime protection blocks exploitation in production as an interim safeguard until the upgrade lands.

Is GHSA-hw6r-g8gj-2987 actively exploited in the wild?

No public exploit code has been indexed for GHSA-hw6r-g8gj-2987 yet. This does not mean the vulnerability cannot be exploited — absence of public exploits does not imply safety. Apply the recommended fix and use O3 Security to monitor your exposure.

When was GHSA-hw6r-g8gj-2987 published, and has it been updated?

GHSA-hw6r-g8gj-2987 was published on August 30, 2023. Advisory data evolves as severity scores, affected ranges, and exploit intelligence are revised — always check the latest version of the advisory before acting.

📦 GitHub Actions

Not in CISA KEV

Actions expression injection in `filter-test-configs` (`GHSL-2023-181`)GHSA-hw6r-g8gj-2987

GHSA-hw6r-g8gj-2987 is a security vulnerability in https://github.com/pytorch/pytorch/.github/actions/filter-test-configs. The records list no fixed version yet; check the vendor advisory below and apply the mitigations in the meantime.

Published

Aug 30, 2023

Updated

Aug 30, 2023

Affected

1 pkg

Patched

None yet

Exploits

None indexed

Exploitation data as of Aug 30, 2023 · OSV.dev, FIRST.org (EPSS)

Real-World Exposure

1 pkg affected

📦https://github.com/pytorch/pytorch/.github/actions/filter-test-configs

Real-time download stats are indexed for npm and PyPI packages. This vulnerability affects GitHub Actions packages — download data is not available via public APIs for these ecosystems.

Description

The pytorch/pytorch filter-test-configs workflow is vulnerable to an expression injection in Actions, allowing an attacker to potentially leak secrets and alter the repository using the workflow.

Details

The filter-test-configs workflow is using the raw github.event.workflow_run.head_branch value inside the filter step:

- name: Select all requested test configurations
  shell: bash
  env:
    GITHUB_TOKEN: ${{ inputs.github-token }}
    JOB_NAME: ${{ steps.get-job-name.outputs.job-name }}
  id: filter
  run: |
    ...
    python3 "${GITHUB_ACTION_PATH}/../../scripts/filter_test_configs.py" \
      ...
      --branch "${{ github.event.workflow_run.head_branch }}"

In the event of a repository using filter-test-configs in a pull_request_target-triggered workflow, an attacker could use a malicious branch name to gain command execution in the step and potentially leak secrets.

name: Example

on: pull_request_target

jobs:
  example:
    runs-on: ubuntu-latest
    steps:
      - name: Filter
        uses: pytorch/pytorch/.github/actions/filter-test-configs@v2

Impact

This issue may lead to stealing workflow secrets.

Remediation

Use an intermediate environment variable for potentially attacker-controlled values such as github.event.workflow_run.head_branch:

- name: Select all requested test configurations
  shell: bash
  env:
    GITHUB_TOKEN: ${{ inputs.github-token }}
    JOB_NAME: ${{ steps.get-job-name.outputs.job-name }}
    HEAD_BRANCH: ${{ github.event.workflow_run.head_branch }}
  id: filter
  run: |
    ...
    python3 "${GITHUB_ACTION_PATH}/../../scripts/filter_test_configs.py" \
      ...
      --branch "$HEAD_BRANCH"

Resources

Affected Packages

1 total

Ecosystem	Package	Vulnerable range	Fix
📦GitHub Actions	`https://github.com/pytorch/pytorch/.github/actions/filter-test-configs`	all versions	No fix

Detection & mitigation playbook

Open-source dependency

Detect
Scan your dependency tree (package-lock.json, pnpm-lock.yaml, requirements.txt, go.sum, etc.) for https://github.com/pytorch/pytorch/.github/actions/filter-test-configs, including transitive dependencies — a direct dependency you never call can still pull in a vulnerable version.
Remediation status
The records we use list no patched version of https://github.com/pytorch/pytorch/.github/actions/filter-test-configs for GHSA-hw6r-g8gj-2987. Check the maintainer's advisory, and where your build allows, override or pin the dependency away from the vulnerable range.
Mitigate without a patch
If you can't upgrade right away: gate or disable the affected feature, validate untrusted input at the boundary, and avoid passing attacker-controlled data into the vulnerable path. O3's runtime protection blocks exploitation in production as an interim safeguard until the upgrade lands.

Frequently Asked Questions

The `pytorch/pytorch` `filter-test-configs` workflow is vulnerable to an expression injection in Actions, allowing an attacker to potentially leak secrets and alter the repository using the workflow. ### Details The [`filter-test-configs`](https://github.com/pytorch/pytorch/blob/ec26947c586dd323d741da80008403664c533f65/.github/actions/filter-test-configs/action.yml) workflow is using the raw `github.event.workflow_run.head_branch` value inside the `filter` step: ```yaml - name: Select all requested test configurations shell: bash env: GITHUB_TOKEN: ${{ inputs.github-token }} JOB

O3 Security · Impact-Aware SCA

Is GHSA-hw6r-g8gj-2987 in your dependencies?

Find it across GitHub Actions, including transitive dependencies.

Scan my dependencies How O3 SCA works