Skip to content
COOEY

EXPOSURES › CVE-2025-30154

CVE-2025-30154

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2025-03-24 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2025-30154 ↗
⌖ EXPLOITED IN THE WILD SHAME 50/100 exploited-in-wild

A GitHub Action leaked secrets to workflow logs due to embedded malicious code, potentially exposing sensitive information to unauthorized parties.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED
reviewdog · vendoraction-setup GitHub Action · product
DESCRIPTION

reviewdog action-setup GitHub Action contains an embedded malicious code vulnerability that dumps exposed secrets to Github Actions Workflow Logs.

AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.