Skip to content
OpenAdvisories

Package · GitHub Actions

tj-actions/branch-names

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.1
    CVE-2025-54416 Public exploit

    tj-actions/branch-names Contains Command Injection Vulnerability

    tj-actions/branch-names is a Github actions repository that contains workflows to retrieve branch or tag names with support for all events. In versions 8.2.1 and below, a critical vulnerability has been identified in the tj-actions/branch-names' GitHub Action…

    tj-actions branch-names tj-actions/branch-names GitHub Actions
  • Critical 9.3
    CVE-2023-49291

    Improper Sanitization of Branch Name Leads to Arbitrary Code Injection

    tj-actions/branch-names is a Github action to retrieve branch or tag names with support for all events. The `tj-actions/branch-names` GitHub Actions improperly references the `github.event.pull_request.head.ref` and `github.head_ref` context variables within …

    tj-actions branch-names tj-actions/branch-names GitHub Actions