CVE ID : CVE-2025-30066

Published : March 15, 2025, 6:15 a.m. | 46 minutes ago

Description : tj-actions changed-files through 45.0.7 allows remote attackers to discover secrets by reading actions logs. (The tags v1 through v45.0.7 were not originally affected, but were modified by a threat actor to point at commit 0e58ed8, which contains the malicious updateFeatures code.)

Severity: 8.6 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…