actions vulnerabilities
6 published CVEs name actions among the affected products.
- 6Published CVEs6 of them scored
- 0Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-5890
actions toolkit glob internal-pattern.ts globEscape redos
actions · toolkit
Medium5.3 - CVE-2024-42471
Arbitrary File Write via artifact extraction in actions/artifact
actions · toolkit
High7.3 - CVE-2022-39321
GitHub Actions Runner vulnerable to Docker Command Escaping
actions · runner
High8.8 - CVE-2022-35954
Delimiter injection vulnerability in @actions/core exportVariable
actions · toolkit
Medium5.0 - CVE-2020-15228
Environment Variable Injection in GitHub Actions
actions · toolkit
Low3.5 - CVE-2020-11021
HTTP request which redirect to another hostname do not strip authorization header in Actions Http-Client
actions · http-client
Medium6.3