Products: 3
Vulnerabilities: 5
Known Exploited: 1
2
Critical Level Threats
3
High Level Threats
0
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2025-54416
tj-actions/branch-names Contains Command Injection Vulnerability
Last Modified: Apr 15, 2026
Published: Jul 26, 2025
CVE-2025-30066
tj-actions changed-files before 46 allows remote attackers to discover secrets by reading actions logs. (The tags v1 through v45.0.7 were affected on 2025-03-14 and 2025-03-15 because they were modified by a threat actor to point at commit 0e58ed8, which contained malicious updateFeatures code.)
Last Modified: Feb 26, 2026
Published: Mar 15, 2025
CVE-2023-52137
GitHub Action tj-actions/verify-changed-files is vulnerable to command injection in output filenames
Last Modified: Nov 21, 2024
Published: Dec 29, 2023
CVE-2023-51664
tj-actions/changed-files command injection in output filenames
Last Modified: Nov 21, 2024
Published: Dec 27, 2023
CVE-2023-49291
Improper Sanitization of Branch Name Leads to Arbitrary Code Injection
Last Modified: Nov 21, 2024
Published: Dec 04, 2023
Items Per Page
