Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Critical9.1tj-actions/branch-names has a Command Injection VulnerabilityCVE-2025-54416 · CVE.org · FIRST EPSS · GitHub Advisory Database · GitHub ActionsEPSS 0.7%Jul 25, 2025
High8.6tj-actions/changed-files GitHub Action Embedded Malicious Code VulnerabilityCVE-2025-30066 · tj-actions · changed-files · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 72.1%Mar 14, 2025
High7.3tj-actions/changed-files has Potential Actions command injection in output filenames (GHSL-2023-271)CVE-2023-51664 · CVE.org · FIRST EPSS · GitHub Advisory Database · GitHub ActionsEPSS 3.4%Jan 2, 2024