Brand
tj-actions: actively exploited vulnerabilities
1 vulnerability in a tj-actions product (changed-files GitHub Action) is in CISA’s catalog of exploited vulnerabilities. It was added on March 18, 2025.
-
0 vulnerabilities added in the last 12 months
-
1 exploited vulnerability in the catalog, in total
-
0 added in the last 30 days
By category
Add just one tj-actions category to your radar, or open its page.
- Development and CI/CD 1 vulnerability
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
- changed-files GitHub Action 1 vulnerability · Development and CI/CD
Name used by CISA: tj-actions. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this tj-actions list.
Rank 1tj-actions changed-files GitHub Action
CVE-2025-30066tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Mar 18, 2025
- CISA deadline
- 21 days
- CVSS severity
- 8.6 (high)
Follow and verify
Indicative classification, based on the vendor and product names given by CISA. How products are classified.