Tj-actions Changed-files — known CVE vulnerabilities

Every CVE whose affected-product data names Tj-actions Changed-files, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2025-30066 — CVSS 8.6 (high) — actively exploited: tj-actions changed-files before 46 allows remote attackers to discover secrets by reading actions logs. (The tags v1 through v45.0.7 were…
• CVE-2023-51664 — CVSS 7.3 (high): tj-actions/changed-files is a Github action to retrieve all files and directories. Prior to 41.0.0, the `tj-actions/changed-files` workflow…