tag
Github-Actions
Critical
tj-actions/branch-names GitHub Actions Command Injection (CVE-2025-54416)
CVE-2025-54416·
tj-actions/branch-names GitHub Action
patched
Critical
Sherlock CI `pull_request_target` Command Injection → GitHub Actions Secret Exfiltration (CVE-2026-44590)
CVE-2026-44590·
sherlock-project/sherlock (GitHub Actions workflow validate_modified_targets.yml)
patched
High
psf/black GitHub Action RCE via Insecure Regex Version Validation — CVE-2026-31900
CVE-2026-31900 (GHSA-v53h-f6m7-xcgm)·
psf/black GitHub Action
patched