actions
- Total products in the ecosystem
- 3
- Total vulnerabilities (90 days)
- 0
en
Verify to analyze this security profile
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2025-5890actions toolkit glob internal-pattern.ts globEscape redos | Exploitation statusNot known exploited | FixNot confirmed | Affected producttoolkit | Published06/09/2025 | SeverityMedium |
CVE-2024-42471Arbitrary File Write via artifact extraction in actions/artifact | Exploitation statusNot known exploited | FixNot confirmed | Affected producttoolkit | Published09/02/2024 | SeverityHigh |
CVE-2022-39321GitHub Actions Runner vulnerable to Docker Command Escaping | Exploitation statusNot known exploited | FixNot confirmed | Affected productrunner | Published10/25/2022 | SeverityHigh |
CVE-2022-35954Delimiter injection vulnerability in @actions/core exportVariable | Exploitation statusNot known exploited | FixNot confirmed | Affected producttoolkit | Published08/13/2022 | SeverityMedium |
CVE-2020-15228Environment Variable Injection in GitHub Actions | Exploitation statusNot confirmed | FixNot confirmed | Affected producttoolkit | Published10/01/2020 | SeverityLow |
CVE-2020-11021HTTP request which redirect to another hostname do not strip authorization header in Actions Http-Client | Exploitation statusNot confirmed | FixYes | Affected producthttp-client | Published04/29/2020 | SeverityMedium |