Vulnerabilidades de Reviewdog
CVEs publicadas que afetam produtos de Reviewdog: 1 registro(s), com severidade, exploração e correções.
Reviewdog 1Action-ast-grep 1Action-composite-template 1Action-setup 1Action-shellcheck 1Action-staticcheck 1Action-typos 1
CVE-2025-30154
Alta · 8.6
KEV Alta · 57 CWE-506 19/03/2025
reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability
reviewdog/action-setup is a GitHub action that installs reviewdog. reviewdog/action-setup@v1 was compromised March 11, 2025, between 18:42 and 20:31 UTC, with malicious code added that dumps exposed secrets to Github Actions Workflow Logs. Other reviewdog actions that use `reviewdog/action-setup@v1` that would also be compromised, regardless of version or pinning method, are reviewdog/action-shellcheck, reviewdog/action-composite-template, reviewdog/action-staticcheck, reviewdog/action-ast-grep, and reviewdog/action-typos.