aeon-toolkit vulnerabilities and threats

A code injection vulnerability (CWE-94) exists in the aeon-toolkit aeon library prior to version 1.5.0. The issue arises from a GitHub Actions workflow using pull_request_target for pre-commit checks on forked pull requests, allowing malicious fork code to execute with elevated privileges. This could expose tokens and enable unauthorized repository write access. The vulnerability is fixed in version 1.5.0.