CVE-2025-30154 Reviewdog Action-Setup GitHub Action
reviewdog action-setup GitHub Action contains an embedded malicious code vulnerability that dumps exposed secrets to Github Actions Workflow Logs.
- CVSS
- not scored
On CISA’s exploited list
reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability
- Added
- 2025-03-24
- Federal patch deadline
- 2025-04-14
- Ransomware use
- not known