tj-actions

Records5All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

tj-actions records in CISA KEV

Products in the NVD configurations · select one to filter the records

2 records in Changed-files · all components

TI-2025-21427 CVE-2025-30066 · GHSA-mrrh-fwg8-r2c3

CRITICAL 94KEV

tj-actions changed-files before 46 allows remote attackers to discover secrets by reading actions logs.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.72092 Published 2025-03-15 Fixed in 46, 46.0.1 CWE-506

TI-2023-28311 CVE-2023-51664 · GHSA-mcph-m25j-8j63

HIGH 76

tj-actions/changed-files is a Github action to retrieve all files and directories.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03351 Published 2023-12-27 Fixed in 41.0.0, 41 CWE-74