tj-actions

Products

Product	CVEs	Exploited	Latest
changed-files	2	1	Mar 15, 2025
branch-names	2	–	Jul 26, 2025
verify-changed-files	1	–	Dec 29, 2023

CVE-2025-30066 High 8.6 Exploited tj-actions changed-files before 46 allows remote attackers to discover secrets by reading actions logs. (The tags v1 through v45.0.7 were affected on 2025-03-14 and 2025-03-15 because they were modifi 72.1%
CVE-2025-54416 Critical 9.1 tj-actions/branch-names Contains Command Injection Vulnerability 0.7%
CVE-2023-52137 High 7.7 GitHub Action tj-actions/verify-changed-files is vulnerable to command injection in output filenames 2.6%
CVE-2023-51664 High 7.3 tj-actions/changed-files command injection in output filenames 3.4%
CVE-2023-49291 Critical 9.3 Improper Sanitization of Branch Name Leads to Arbitrary Code Injection 1.4%