Action Shellcheck

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-30154 HIGH POC KEV PATCH THREAT Act Now

reviewdog/action-setup GitHub Action was compromised with malicious code that dumped CI/CD secrets to workflow logs, affecting all reviewdog actions that depend on this setup action.

Information Disclosure Action Ast Grep Action Composite Template Action Setup Action Shellcheck +2

NVD GitHub

CVSS 3.1

8.6

EPSS

15.4%

CVE-2025-30154

EPSS 15% CVSS 8.6

HIGH POC KEV PATCH THREAT Act Now

reviewdog/action-setup GitHub Action was compromised with malicious code that dumped CI/CD secrets to workflow logs, affecting all reviewdog actions that depend on this setup action.

Information Disclosure Action Ast Grep Action Composite Template +4

NVD GitHub