Skip to content
OpenAdvisories

Product · actions

toolkit

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-5890

    actions toolkit glob internal-pattern.ts globEscape redos

    A vulnerability classified as problematic has been found in actions toolkit 0.5.0. This affects the function globEscape of the file toolkit/packages/glob/src/internal-pattern.ts of the component glob. The manipulation leads to inefficient regular expression c…

    actions toolkit
  • Medium 5.0
    CVE-2022-35954

    Delimiter injection vulnerability in @actions/core exportVariable

    The GitHub Actions ToolKit provides a set of packages to make creating actions easier. The `core.exportVariable` function uses a well known delimiter that attackers can use to break out of that specific variable and assign values to other arbitrary variables.…

    actions toolkit @actions/core npm