Skip to content
OpenAdvisories

Package · GitHub Actions

reviewdog/action-setup

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2025-30154 Exploited

    Multiple Reviewdog actions were compromised during a specific time period

    reviewdog/action-setup is a GitHub action that installs reviewdog. reviewdog/action-setup@v1 was compromised March 11, 2025, between 18:42 and 20:31 UTC, with malicious code added that dumps exposed secrets to Github Actions Workflow Logs. Other reviewdog act…

    reviewdog reviewdog reviewdog/action-setup GitHub Actions
    KEV Mar 24, 2025