Security Digest
Critical GitHub Actions advisories
12 critical advisories for GitHub Actions packages since October 2023, newest first. Check your project with grep -rn 'uses: <owner>/<action>' .github/workflows.
- conflibot vulnerable to command injection via crafted pull request branch names under pull_request_target CVE-2026-55158 CVSS 9.1 Critical
wktk/conflibot< 1.2.1 → fixed in 1.2.1 - Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypasses CVE-2026-12537 CVSS 10.0 Critical
@google/gemini-cli< 0.39.1 → fixed in 0.39.1;@google/gemini-cli= 0.40.0-preview.2 → fixed in 0.40.0-preview.3;google-github-actions/run-gemini-cli< 0.1.22 → fixed in 0.1.22 - wenxian: Command Injection in GitHub Actions Workflow via `issue_comment.body` CVE-2026-34243 CVSS 9.8 Critical
njzjz/wenxian<= 0.3.1 → no fix listed - Trivy ecosystem supply chain was briefly compromised CVE-2026-33634 CVSS 9.4 Critical
github.com/aquasecurity/trivy= 0.69.4 → no fix listed;aquasecurity/trivy-action< 0.35.0 → fixed in 0.35.0;aquasecurity/setup-trivy< 0.2.6 → fixed in 0.2.6 - Zen-AI-Pentest has Shell Injection via untrusted issue title in ZenClaw Discord Integration workflow GHSA-f67f-hcr6-94mf CVSS 10.0 Critical
SHAdd0WTAka/Zen-Ai-Pentest<= 3.0.0 → no fix listed - xygeni-action v5 tag poisoned with C2 backdoor CVE-2026-31976 CVSS 9.3 Critical
xygeni/xygeni-action>= 5, < 6.4.0 → fixed in 6.4.0 - j178/prek-action vulnerable to arbitrary code injection in composite action GHSA-pwf7-47c3-mfhx CVSS 9.9 Critical
j178/prek-action<= 1.0.5 → fixed in 1.0.6 - m00nl1ght-dev/steam-workshop-deploy: Exposure of Version-Control Repository to an Unauthorized Control Sphere and Insufficiently Protected… GHSA-x6gv-2rvh-qmp6 CVSS 10.0 Critical
m00nl1ght-dev/steam-workshop-deploy< 4 → fixed in 4;BoldestDungeon/steam-workshop-deploy< 2.0.0 → fixed in 2.0.0 - tj-actions/branch-names has a Command Injection Vulnerability CVE-2025-54416 CVSS 9.1 Critical
tj-actions/branch-names<= 8.2.1 → fixed in 9.0.0 - Cromwell GitHub Actions Secrets exfiltration via `Issue_comment` GHSA-phf6-hm3h-x8qp CVSS 9.1 Critical
broadinstitute/cromwell>= 87, < 90 → fixed in 90 - memory overflow vulnerability in OpenEXR-viewer CVE-2023-50245 CVSS 9.8 Critical
afichet/openexr-viewer< 0.6.1 → fixed in 0.6.1 - tj-actions/branch-names's Improper Sanitization of Branch Name Leads to Arbitrary Code Injection CVE-2023-49291 CVSS 9.3 Critical
tj-actions/branch-names< 7.0.7 → fixed in 7.0.7