tj-actions vulnerabilities
5 published CVEs name tj-actions among the affected products; CISA lists 1 of them as exploited in the wild.
- Published CVEs
- 5
- Last 12 months
- 0
- Critical
- 2
- Known exploited
- 1
Critical 2High 3Medium 0Low 0Not scored 0
CVEs per yearBy the year they were published
- 20233
- 20252
Known exploitedNewest addition to KEV first
- CVE-2025-30066
tj-actions changed-files before 46 allows remote attackers to discover secrets by reading actions logs. (The tags v1 through v45.0.7 were affected on…
tj-actions · changed-files
ExploitedHigh8.6
Newest CVEs
- CVE-2025-54416
tj-actions/branch-names Contains Command Injection Vulnerability
tj-actions · branch-names
Critical9.1 - CVE-2025-30066
tj-actions changed-files before 46 allows remote attackers to discover secrets by reading actions logs. (The tags v1 through v45.0.7 were affected on…
tj-actions · changed-files
ExploitedHigh8.6 - CVE-2023-52137
GitHub Action tj-actions/verify-changed-files is vulnerable to command injection in output filenames
tj-actions · verify-changed-files
High7.7 - CVE-2023-51664
tj-actions/changed-files command injection in output filenames
tj-actions · changed-files
High7.3 - CVE-2023-49291
Improper Sanitization of Branch Name Leads to Arbitrary Code Injection
tj-actions · branch-names
Critical9.3