What’s Vulnerable › Products

tj-actions changed-files vulnerabilities

2 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your tj-actions changed-files version is affected

Exploited tj-actions changed-files vulnerabilities

• CVE-2025-30066 — tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability

Latest tj-actions changed-files vulnerabilities

• CVE-2025-30066 — tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability (CVSS 8.6) — exploited
• CVE-2023-51664 — tj-actions/changed-files command injection in output filenames (CVSS 9.8)