Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection

Cybersecurity researchers at Wizhave disclosed a new GitHub Actions workflow injection vulnerability in Snowflake's publicsnowflakedb/snowflake-connector-net repository that it said could be exploited through a crafted GitHub issue to execute commands in a workflow containing internal Jira credentials. The issue was present in.github/workflows/jira_issue.yml, which ran when a