PT-2023-31875 · Github · Tj-Actions/Changed-Files

Name of the Vulnerable Software and Affected Versions: tj-actions/changed-files versions prior to 41.0.0 Description: The tj-actions/changed-files workflow allows for command injection in changed filenames, allowing an attacker to execute arbitrary code and potentially leak secrets. This issue ma...