get-workflow-version-action vulnerabilities

1 known vulnerability in get-workflow-version-action from Canonical. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  get-workflow-version-action: Insertion of Sensitive Information into Log File

  CVE-2025-31479Apr 2, 2025Canonical

  canonical/get-workflow-version-action is a GitHub composite action to get commit SHA that GitHub Actions reusable workflow was called with. Prior to 1.0.1, if the get-workflow-version-action step fails, the exception output may include the GITHUB_TOKEN. If the