Brand
tj-actions: actively exploited vulnerabilities
1 vulnerability in a tj-actions product (changed-files GitHub Action) is in CISA’s catalog of exploited vulnerabilities. It was added on March 18, 2025.
-
0 vulnerabilities added in the last 12 months
-
1 exploited vulnerability in the catalog, in total
-
0 added in the last 30 days
By category
Add just one tj-actions category to your radar, or open its page.
- Development and CI/CD 1 vulnerability
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
- changed-files GitHub Action1 vulnerability, Development and CI/CD
Name used by CISA: tj-actions. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this tj-actions list.
- Rank 1
tj-actions changed-files GitHub ActionCVE-2025-30066
tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability
CVSS severity 8.6high
Added Mar 18, 2025
Follow and verify
Indicative classification, based on the vendor and product names given by CISA. How products are classified.