Threat intelligence / Vulnerability
CVE-2025-30066
tj-actions/changed-files GitHub Action contains an embedded malicious code vulnerability that allows a remote attacker to discover secrets by reading Github Actions Workflow Logs. These secrets may include, but are not limited to, valid AWS access keys, GitHub personal access tokens (PATs), npm tokens, and private RSA keys.
Vulnerability
TypeVulnerability
External ID—
First seen2025-03-18
Last seen2025-03-18
Confidence
—
tj-actions/changed-files GitHub Action contains an embedded malicious code vulnerability that allows a remote attacker to discover secrets by reading Github Actions Workflow Logs. These secrets may include, but are not limited to, valid AWS access keys, GitHub personal access tokens (PATs), npm tokens, and private RSA keys.
Labels
CISA KEV context
Vendor / producttj-actions changed-files GitHub Action
Added2025-03-18
Due date2025-04-08
4 recorded
Relationships
2 external