773 PoCs | 119 CISA KEV

tag

Github-Actions

tj-actions/branch-names GitHub Actions Command Injection (CVE-2025-54416)

CVE-2025-54416 cloud Patched

CVE-2025-54416cloudCRITICAL 9.1Patched2026-07-06Sherlock CI `pull_request_target` Command Injection → GitHub Actions Secret Exfiltration (CVE-2026-44590)

CVE-2026-44590 cloud Patched

CVE-2026-44590cloudCRITICAL 9.3Patched2026-07-05psf/black GitHub Action RCE via Insecure Regex Version Validation — CVE-2026-31900

CVE-2026-31900 (GHSA-v53h-f6m7-xcgm) misc Patched

CVE-2026-31900miscHIGH 8.7Patched2026-07-05