← back | CVE Intelligence

CVE-2025-30066

Curated 2 security research writeups, vulnerability advisories and exploitation analyses for CVE-2025-30066.

Coverage Span: 2025-03-15 → 2025-03-16
Reports: 2 related reports

Associated Reports & Timeline

Get the TL;DR: tj-actions/changed-files Supply Chain Attack

The tj-actions/changed-files GitHub Action, which is currently used in over 23,000 repositories, has been compromised, leaking secrets through workflow logs and impacting thousands of CI pipelines.

GitHub Action tj-actions/changed-files supply chain attack: everything you need to know

Everything to know about the tj-actions/changed-files supply chain attack (CVE-2025-30066): how the compromise leaked CI secrets in public repo logs, attribution clues, and mitigation guidance.