How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos(research.kudelskisecurity.com)
657 points by spiridow | 219 comments
Kudelski Security research post describing how a pull request to CodeRabbit led to remote code execution and write access to about one million repositories.






