---
title: "tj-actions: known exploited vulnerabilities"
url: https://erroneo.us/security/vendor/tj-actions/
description: "Every tj-actions vulnerability in CISA's Known Exploited Vulnerabilities catalog since October 2023 (1), newest first, with due dates and fixes."
type: vendor
section: "Security Digest"
date_modified: 2025-03-18
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# tj-actions: known exploited vulnerabilities

- 2025-03-18 [CVE-2025-30066](https://erroneo.us/security/cve/CVE-2025-30066/index.md) tj-actions changed-files GitHub Action: tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability (due 2025-04-08; ransomware: Unknown)

---
Source page: https://erroneo.us/security/vendor/tj-actions/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt