What’s Vulnerable › Products

actions toolkit vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your actions toolkit version is affected

Latest actions toolkit vulnerabilities

• CVE-2025-5890 — actions toolkit glob internal-pattern.ts globEscape redos (CVSS 4.3)
• CVE-2022-35954 — Delimiter injection vulnerability in @actions/core exportVariable (CVSS 5.0)