Skip to content
OpenAdvisories

Package · GitHub Actions

RageAgainstThePixel/setup-steamcmd

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High —
    GHSA-c5qx-p38x-qf5w

    RageAgainstThePixel/setup-steamcmd leaked authentication token in job output logs

    ### Summary Log output includes authentication token that provides full account access ### Details The post job action prints the contents of `config/config.vdf` which holds the saved authentication token and can be used to sign in on another machine. This me…

    RageAgainstThePixel/setup-steamcmd GitHub Actions