Xygeni Xygeni-action — known CVE vulnerabilities

Every CVE whose affected-product data names Xygeni Xygeni-action, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2026-31976 — CVSS 9.8 (critical): xygeni-action is the GitHub Action for Xygeni Scanner. On March 3, 2026, an attacker with access to compromised credentials created a…