tj-actions changed-files vulnerabilities

2 published CVEs name tj-actions changed-files among the affected products; CISA lists 1 of them as exploited in the wild.

All 2 in the list Atom feed of new CVEs

Published CVEs: 2
Last 12 months: 0
Critical: 0
Known exploited: 1

Critical 0High 2Medium 0Low 0Not scored 0

CVEs per yearBy the year they were published

20231
20251

Known exploitedNewest addition to KEV first

CVE-2025-30066
tj-actions changed-files before 46 allows remote attackers to discover secrets by reading actions logs. (The tags v1 through v45.0.7 were affected on…
tj-actions · changed-files
ExploitedHigh8.6

Newest CVEs

CVE-2025-30066
tj-actions changed-files before 46 allows remote attackers to discover secrets by reading actions logs. (The tags v1 through v45.0.7 were affected on…
tj-actions · changed-files
ExploitedHigh8.6
CVE-2023-51664
tj-actions/changed-files command injection in output filenames
tj-actions · changed-files
High7.3

Most common weaknesses