~/products/reviewdog/action-ast-grep

pipeline liveDigest Docs

Reviewdog Action-Ast-Grep vulnerabilities

1 known vulnerability affecting reviewdog/action-ast-grep.

Total CVEs

1

CISA KEV

1

actively exploited

Public exploits

0

Exploited in wild

1

Severity breakdown

HIGH1

Vulnerabilities

SortPage 1 of 1

CVE-2025-30154P1HIGHCVSS 8.6KEVfixed in 1.26.22025-03-19

CVE-2025-30154 [HIGH] CWE-506 CVE-2025-30154: reviewdog/action-setup is a GitHub action that installs reviewdog. reviewdog/action-setup@v1 was com reviewdog/action-setup is a GitHub action that installs reviewdog. reviewdog/action-setup@v1 was compromised March 11, 2025, between 18:42 and 20:31 UTC, with malicious code added that dumps exposed secrets to Github Actions Workflow Logs. Other reviewdog actions that use `reviewdog/action-setup@v1` that would also be compromised, regardless of versio

Reviewdog Action-Ast-Grep vulnerabilities | cvebase