What’s Vulnerable › Products

github codeql-action vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your github codeql-action version is affected

Latest github codeql-action vulnerabilities

• CVE-2025-24362 — CodeQL GitHub Action failed workflow writes GitHub PAT to debug artifacts (CVSS 7.1)
• CVE-2021-32638 — CodeQL runner: Command-line options that make GitHub access tokens visible to other processes are now deprecated (CVSS 4.4)