atlas-tj-actions-poc

CVE-2025-54416: tj-actions/branch-names Эксплуатация внедрения команд PoC Этот репозиторий демонстрирует CVE-2025-54416 , критическую уязвимость внедрения команд в tj-actions/branch-names, затрагивающую более 5 000 публичных репозиториев. Уязвимость Действие GitHub tj-actions/branch-names версии ...

Exploit for CVE-2025-54416

CVE-2025-54416: tj-actions/branch-names Command Injection PoC...

CVE-2025-54416

tj-actions/branch-names is a Github actions repository that contains workflows to retrieve branch or tag names with support for all events. In versions 8.2.1 and below, a critical vulnerability has been identified in the tj-actions/branch-names' GitHub Action workflow which allows arbitrary comma...

CVE-2025-54416: Improper Neutralization of Special Elements used in a Command

tj-actions/branch-names is a Github actions repository that contains workflows to retrieve branch or tag names with support for all events. In versions 8.2.1 and below, a critical vulnerability has been identified in the tj-actions/branch-names' GitHub Action workflow which allows arbitrary comma...

PT-2025-30953

Name of the Vulnerable Software and Affected Versions: tj-actions/branch-names versions 8.2.1 and below Description: A critical command injection vulnerability exists in the tj-actions/branch-names GitHub Action workflow. This flaw stems from inconsistent input sanitization and unescaped output,...

CVE-2023-49291 Improper Sanitization of Branch Name Leads to Arbitrary Code Injection

tj-actions/branch-names is a Github action to retrieve branch or tag names with support for all events. The tj-actions/branch-names GitHub Actions improperly references the github.event.pullrequest.head.ref and github.headref context variables within a GitHub Actions run step. The head ref variab...

CVE-2023-49291: Improper Input Validation

tj-actions/branch-names is a Github action to retrieve branch or tag names with support for all events. The tj-actions/branch-names GitHub Actions improperly references the github.event.pullrequest.head.ref and github.headref context variables within a GitHub Actions run step. The head ref variab...

PT-2023-31154

Name of the Vulnerable Software and Affected Versions tj-actions/branch-names versions prior to 7.0.7 Description The tj-actions/branch-names GitHub Actions improperly references the github.event.pull request.head.ref and github.head ref context variables within a GitHub Actions run step. The hea...