actions

Top products

The 6 most recently published vulnerabilities affecting actions.

• CVE-2025-5890actions toolkit glob internal-pattern.ts globEscape redos4.3Jun 9, 2025
• CVE-2024-42471Arbitrary File Write via artifact extraction in actions/artifact7.3Sep 2, 2024
• CVE-2022-39321GitHub Actions Runner vulnerable to Docker Command Escaping8.8Oct 25, 2022
• CVE-2022-35954Delimiter injection vulnerability in @actions/core exportVariable5.0Aug 13, 2022
• CVE-2020-15228Environment Variable Injection in GitHub Actions3.5Oct 1, 2020
• CVE-2020-11021HTTP request which redirect to another hostname do not strip authorization header in Actions Http-Client6.3Apr 29, 2020