Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2025/04/02 9:9 p.m.55 views

CVE-2025-31479 canonical/get-workflow-version-action can leak a partial GITHUB_TOKEN in exception output

canonical/get-workflow-version-action is a GitHub composite action to get commit SHA that GitHub Actions reusable workflow was called with. Prior to 1.0.1, if the get-workflow-version-action step fails, the exception output may include the GITHUBTOKEN. If the full token is included in the excepti...

8.2CVSS0.00603EPSS
SaveExploits0References3
Rows per page
Query Builder