TJ
Vendor
tj-actions
6
CVEs
2
On KEV
0
New 30D
Products
CH9.8
changed-files
tj-actions
2 CVEs1 on KEV0 new
CG8.6
changed-files GitHub Action
tj-actions
1 CVEs1 on KEV0 new
BR9.8
branch-names
tj-actions
2 CVEs0 on KEV0 new
VE8.8
verify-changed-files
tj-actions
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-54416 | BR branch-names tj-actions | 9.1 | Jul 26 | tj-actions/branch-names Contains Command Injection Vulnerability |
| CVE-2025-30066 In wildKEV | CH changed-files tj-actions | 8.6 | Mar 15 | tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability |
| CVE-2023-52137 | VE verify-changed-files tj-actions | 8.8 | Dec 29 | GitHub Action tj-actions/verify-changed-files is vulnerable to command injection in output filenames |
| CVE-2023-51664 | CH changed-files tj-actions | 9.8 | Dec 27 | tj-actions/changed-files command injection in output filenames |
| CVE-2023-49291 | BR branch-names tj-actions | 9.8 | Dec 4 | Improper Sanitization of Branch Name Leads to Arbitrary Code Injection |