---
title: "Critical GitHub Actions advisories"
url: https://erroneo.us/security/ecosystem/actions/
description: "All 12 critical GitHub-reviewed GitHub Actions security advisories since October 2023, newest first, with vulnerable ranges and fixed versions."
type: ecosystem
section: "Security Digest"
date_modified: 2026-08-17
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Critical GitHub Actions advisories

- 2026-08-17 [CVE-2026-55158](https://erroneo.us/security/cve/CVE-2026-55158/index.md) conflibot vulnerable to command injection via crafted pull request branch names under pull_request_target — wktk/conflibot < 1.2.1 → 1.2.1
- 2026-04-24 [CVE-2026-12537](https://erroneo.us/security/cve/CVE-2026-12537/index.md) Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypasses — @google/gemini-cli < 0.39.1 → 0.39.1; @google/gemini-cli = 0.40.0-preview.2 → 0.40.0-preview.3; google-github-actions/run-gemini-cli < 0.1.22 → 0.1.22
- 2026-03-29 [CVE-2026-34243](https://erroneo.us/security/cve/CVE-2026-34243/index.md) wenxian: Command Injection in GitHub Actions Workflow via `issue_comment.body` — njzjz/wenxian <= 0.3.1 → no fix
- 2026-03-24 [CVE-2026-33634](https://erroneo.us/security/cve/CVE-2026-33634/index.md) Trivy ecosystem supply chain was briefly compromised — github.com/aquasecurity/trivy = 0.69.4 → no fix; aquasecurity/trivy-action < 0.35.0 → 0.35.0; aquasecurity/setup-trivy < 0.2.6 → 0.2.6
- 2026-03-20 [GHSA-f67f-hcr6-94mf](https://erroneo.us/security/ghsa/GHSA-f67f-hcr6-94mf/index.md) Zen-AI-Pentest has Shell Injection via untrusted issue title in ZenClaw Discord Integration workflow — SHAdd0WTAka/Zen-Ai-Pentest <= 3.0.0 → no fix
- 2026-03-11 [CVE-2026-31976](https://erroneo.us/security/cve/CVE-2026-31976/index.md) xygeni-action v5 tag poisoned with C2 backdoor — xygeni/xygeni-action >= 5, < 6.4.0 → 6.4.0
- 2025-09-29 [GHSA-pwf7-47c3-mfhx](https://erroneo.us/security/ghsa/GHSA-pwf7-47c3-mfhx/index.md) j178/prek-action vulnerable to arbitrary code injection in composite action — j178/prek-action <= 1.0.5 → 1.0.6
- 2025-08-13 [GHSA-x6gv-2rvh-qmp6](https://erroneo.us/security/ghsa/GHSA-x6gv-2rvh-qmp6/index.md) m00nl1ght-dev/steam-workshop-deploy: Exposure of Version-Control Repository to an Unauthorized Control Sphere and Insufficiently Protected Credentials — m00nl1ght-dev/steam-workshop-deploy < 4 → 4; BoldestDungeon/steam-workshop-deploy < 2.0.0 → 2.0.0
- 2025-07-25 [CVE-2025-54416](https://erroneo.us/security/cve/CVE-2025-54416/index.md) tj-actions/branch-names has a Command Injection Vulnerability — tj-actions/branch-names <= 8.2.1 → 9.0.0
- 2025-05-28 [GHSA-phf6-hm3h-x8qp](https://erroneo.us/security/ghsa/GHSA-phf6-hm3h-x8qp/index.md) Cromwell GitHub Actions Secrets exfiltration via `Issue_comment` — broadinstitute/cromwell >= 87, < 90 → 90
- 2023-12-12 [CVE-2023-50245](https://erroneo.us/security/cve/CVE-2023-50245/index.md) memory overflow vulnerability in OpenEXR-viewer — afichet/openexr-viewer < 0.6.1 → 0.6.1
- 2023-12-05 [CVE-2023-49291](https://erroneo.us/security/cve/CVE-2023-49291/index.md) tj-actions/branch-names's Improper Sanitization of Branch Name Leads to Arbitrary Code Injection — tj-actions/branch-names < 7.0.7 → 7.0.7

---
Source page: https://erroneo.us/security/ecosystem/actions/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt