ZeusQA
Start free

Known exploited vulnerabilities

tj-actions vulnerabilities attackers have used

Every tj-actions vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 1 tj-actions vulnerability as exploited in the wild, 0 of them added in the last 12 months. The most recent is CVE-2025-30066, added Mar 18, 2025. changed-files GitHub Action has the most entries (1).

In KEV, all time
1
Added, last 12 months
0
Used in ransomware
0
New CVEs this week
0

Every tj-actions entry in CISA KEV

  1. CVE-2025-30066

    Added · due

    tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability

    tj-actions/changed-files GitHub Action contains an embedded malicious code vulnerability that allows a remote attacker to discover secrets by reading Github Actions Workflow Logs. These secrets may include, but are not limited to, valid…

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works