actions toolkit

• CVE-2025-5890 Medium 4.3 actions toolkit glob internal-pattern.ts globEscape redos 0.4%
• CVE-2024-42471 High 7.3 Arbitrary File Write via artifact extraction in actions/artifact 3.2%
• CVE-2022-35954 Medium 5.0 Delimiter injection vulnerability in @actions/core exportVariable 0.7%
• CVE-2020-15228 Low 3.5 Environment Variable Injection in GitHub Actions 1.5%