Filter
-Infinity
0
The RegisterThat massive GitHub supply chain attack? It all started with a stolen SpotBugs token
First published (updated )
News
The RegisterBleepingComputerRecent GitHub supply chain attack traced to leaked SpotBugs token
First published (updated )
News
BleepingComputerBleepingComputerCoinbase was primary target of recent GitHub Actions breaches
First published (updated )
News
BleepingComputertj-action/changed-files GitHub action was compromised
First published (updated )
BleepingComputerGitHub Action hack likely led to another in cascading supply chain attack
First published (updated )
News
BleepingComputerNever miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The RegisterSeparate supply chain attack tied to 23K pwned GitHub repos
First published (updated )
News
The RegisterThe RegisterGitHub supply chain attack spills secrets from 23K projects
First published (updated )
News
The Registertj-action/changed-filestj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability
First published (updated )
actions/tj-actions/verify-changed-filesGitHub Action tj-actions/verify-changed-files is vulnerable to command injection in output filenames
8.8
First published (updated )
actions/tj-actions/changed-filestj-actions/changed-files command injection in output filenames
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Tj-actions Branch-namesImproper Sanitization of Branch Name Leads to Arbitrary Code Injection
9.8
First published (updated )