CISA Warns of Active Exploitation in GitHub Action Supply Chain Compromise
CISA Warns of Active Exploitation in GitHub Action Supply Chain Compromise 2025-03-19 at 08:13 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a vulnerability linked to the supply chain compromise of the GitHub Action, tj-actions/changed-files, to its Known Exploited Vulnerabilities (KEV) catalog. The high-severity flaw, tracked as CVE-2025-30066 (CVSS score: 8.6), […]
CISA Warns of Active Exploitation in GitHub Action Supply Chain Compromise Read More »