reviewdog
Security Risk Profile
65
/100
highSecurity Risk Score
Comprehensive risk assessment based on 6 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 18, 2025 to present
6
Total CVEs
1
Critical+High
3
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
8.6
Base severity
Avg EPSS
61%
Exploit probability
Unpatched
1
Critical/High
Risk Level
65/100
high
⚠️ 3 Active Exploits
Severity Distribution
Critical
0High
1Medium
0Low
0Exploit Likelihood
>50% chance
120-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
No CWE data available
Most Affected Products
1. tj-actions changed-files6
2. reviewdog action-setup5
3. SpotBugs SpotBugs3
4. reviewdog Reviewdog3
5. tj-actions eslint-changed-files3
Recent Vulnerabilities
See more →https://www.theregister.com/2025/04/07/github_supply_chain_attack/
unknown
That massive GitHub supply chain attack? It all started with a stolen SpotBugs token
4/7/2025🔧 No Patch
https://www.bleepingcomputer.com/news/security/recent-github-supply-chain-attack-traced-to-leaked-spotbugs-token/
unknown
Recent GitHub supply chain attack traced to leaked SpotBugs token
4/3/2025⚠ Exploited🔧 No Patch
https://www.bleepingcomputer.com/news/security/coinbase-was-primary-target-of-recent-github-actions-breaches/
unknown
Coinbase was primary target of recent GitHub Actions breaches
3/21/2025🔧 No Patch
CVE-2025-30154
CVSS 8.6EPSS 61%high
reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability
3/19/2025⚠ Exploited🔧 No Patch
https://www.bleepingcomputer.com/news/security/github-action-hack-likely-led-to-another-in-cascading-supply-chain-attack/
unknown
GitHub Action hack likely led to another in cascading supply chain attack
3/18/2025⚠ Exploited🔧 No Patch
https://www.theregister.com/2025/03/18/wiz_github_supply_chain/
unknown
Separate supply chain attack tied to 23K pwned GitHub repos
3/18/2025🔧 No Patch
Monitor reviewdog in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.