Vendors / tj-actions Records 5 All Threatist records
Exploited (KEV) 1
CVSS critical 3
CVSS high 2
Exploited now tj-actions records in CISA KEV
Components Products in the NVD configurations · select one to filter the records Priority CRITICAL 94KEV
tj-actions changed-files before 46 allows remote attackers to discover secrets by reading actions logs.
CVSS 3.1 HIGH 8.6· Network · No auth · No interaction · EPSS 0.72092 · Published 2025-03-15 · Fixed in 46, 46.0.1 CWE-506
Priority HIGH 76
tj-actions/changed-files is a Github action to retrieve all files and directories.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03351 · Published 2023-12-27 · Fixed in 41.0.0, 41 CWE-74
Priority HIGH 72
tj-actions/branch-names is a Github actions repository that contains workflows to retrieve branch or tag names with support for all events.
CVSS 3.1 CRITICAL 9.1· Network · Low privileges · No interaction · EPSS 0.00677 · Published 2025-07-26 · Fixed in 9.0.0 CWE-77
Priority MEDIUM 45
tj-actions/branch-names is a Github action to retrieve branch or tag names with support for all events.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01448 · Published 2023-12-04 · Fixed in 7.0.7 CWE-20
Priority MEDIUM 43
The [`tj-actions/verify-changed-files`](https://github.com/tj-actions/verify-changed-files) action allows for command injection in changed filenames, allowing an attacker to execute arbitrary code and potentially leak se…
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02621 · Published 2023-12-29 · Fixed in 17.0.0, 17 CWE-20
Open these records in search → All records by CVSS severity
3 2 0 0 0
THREATIST.IORead the docs