Disclosure summary
On this week’s show Patrick Gray, Adam Boileau and James Wilson discuss the week’s cybersecurity news. They cover: Mini Shai-Hulud and the TanStack compromise using Github Actions
Source-specific records & product guidance
Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.
Risky Business · RSS-d12531a2b071bc8ad1c32be3b708e33a4cf
Open original source · Updated May 13, 2026
Risky Business #837 -- GitHub Actions footgun claims TanStack
CVE mention in publisher metadata; check the original affected versions.
Original records & references
- NIST NVD record
- CVE Program record
- risky.biz — Publisher advisory
PUBLISHED 2026-05-13T01:08:48-04:00
MODIFIED 2026-05-13T01:08:48-04:00
INGESTED 2026-10-08T12:15:41-04:00