github codeql-action vulnerabilities (CVE)

CVE records published for github codeql-action, newest first. Follow to get an email when a new one appears.

1 results

7.1High

CVE-2025-24362 1 year ago

CodeQL GitHub Action failed workflow writes GitHub PAT to debug artifacts

github codeql-action

In some circumstances, debug artifacts uploaded by the CodeQL Action after a failed code scanning workflow run may contain the environment variables from the workflow run, including any secrets that were exposed as environment variables to the workflow. Users…

1.2%EPSS