Action-staticcheck vulnerabilities
1 known vulnerability in Action-staticcheck from Reviewdog. 1 is rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
1exploited
8.6average CVSS score
Latest first
- 8.6 High severity
reviewdog/action-setup GitHub Action Embedded Malicious Code Exploited
reviewdog/action-setup is a GitHub action that installs reviewdog. reviewdog/action-setup@v1 was compromised March 11, 2025, between 18:42 and 20:31 UTC, with malicious code added that dumps exposed secrets to Github Actions Workflow Logs. Other reviewdog acti