Action Ast Grep
1 CVEs
product
Monthly
reviewdog/action-setup GitHub Action was compromised with malicious code that dumped CI/CD secrets to workflow logs, affecting all reviewdog actions that depend on this setup action.
Information Disclosure
Action Ast Grep
Action Composite Template
Action Setup
Action Shellcheck
+2
NVD
GitHub
CVSS 3.1
8.6
EPSS
15.4%
CVE-2025-30154
EPSS 15%
CVSS 8.6
HIGH
POC
KEV
PATCH
THREAT
Act Now
reviewdog/action-setup GitHub Action was compromised with malicious code that dumped CI/CD secrets to workflow logs, affecting all reviewdog actions that depend on this setup action.
Information Disclosure
Action Ast Grep
Action Composite Template
+4
NVD
GitHub