Vendor

tj-actions

5 known vulnerabilities.

Products

changed-files 2 branch-names 2 verify-changed-files 1

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.1

CVE-2025-54416 Public exploit

tj-actions/branch-names Contains Command Injection Vulnerability

tj-actions/branch-names is a Github actions repository that contains workflows to retrieve branch or tag names with support for all events. In versions 8.2.1 and below, a critical vulnerability has been identified in the tj-actions/branch-names' GitHub Action…

tj-actions branch-names tj-actions/branch-names GitHub Actions

Jul 26, 2025
High 8.6

CVE-2025-30066 Exploited Public exploit EPSS 72%

tj-actions changed-files through 45.0.7 allows remote attackers to discover secrets by reading actions logs.

tj-actions changed-files before 46 allows remote attackers to discover secrets by reading actions logs. (The tags v1 through v45.0.7 were affected on 2025-03-14 and 2025-03-15 because they were modified by a threat actor to point at commit 0e58ed8, which cont…

tj-actions changed-files tj-actions/changed-files GitHub Actions

Mar 15, 2025
KEV Mar 18, 2025