Skip to content
OpenAdvisories

Package · GitHub Actions

tj-actions/verify-changed-files

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.7
    CVE-2023-52137

    GitHub Action tj-actions/verify-changed-files is vulnerable to command injection in output filenames

    The [`tj-actions/verify-changed-files`](https://github.com/tj-actions/verify-changed-files) action allows for command injection in changed filenames, allowing an attacker to execute arbitrary code and potentially leak secrets. The [`verify-changed-files`](htt…

    tj-actions verify-changed-files tj-actions/verify-changed-files GitHub Actions