Skip to content
OpenAdvisories

Package · GitHub Actions

buildalon/setup-steamcmd

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High —
    GHSA-mj96-mh85-r574

    buildalon/setup-steamcmd leaked authentication token in job output logs

    ### Summary Log output includes authentication token that provides full account access ### Details The post job action prints the contents of `config/config.vdf` which holds the saved authentication token and can be used to sign in on another machine. This me…

    buildalon/setup-steamcmd GitHub Actions