Security Digest

tj-actions: known exploited vulnerabilities

1 tj-actions CVE CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.

AddedCVEProduct and flawCISA due
2025-03-18CVE-2025-30066tj-actions changed-files GitHub Action
tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability
2025-04-08