Skim Rs CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Skim Rs CVE published 2026-04-24

CVE-2026-41414

CVE-2026-41414 is a high-severity vulnerability in the Skim fuzzy finder, which allows attackers to execute arbitrary code via a GitHub pull request. The vulnerability has a CVSS score of 7.4 and is fixed in commit bf63404ad51985b00ed304690ba9d477860a5a75. This vulnerability is particularly concerning because it can be exploited by any GitHub user who opens a pull request from a fork, without any gates to [truncated]