actions toolkit vulnerabilities

4 published CVEs name actions toolkit among the affected products.

All 4 in the list Atom feed of new CVEs

Published CVEs: 4
Last 12 months: 0
Critical: 0
Known exploited: 0

Critical 0High 1Medium 2Low 1Not scored 0

CVEs per yearBy the year they were published

20201
20221
20241
20251

Newest CVEs

CVE-2025-5890
actions toolkit glob internal-pattern.ts globEscape redos
actions · toolkit
Medium5.3
CVE-2024-42471
Arbitrary File Write via artifact extraction in actions/artifact
actions · toolkit
High7.3
CVE-2022-35954
Delimiter injection vulnerability in @actions/core exportVariable
actions · toolkit
Medium5.0
CVE-2020-15228
Environment Variable Injection in GitHub Actions
actions · toolkit
Low3.5

Most common weaknesses