branch-names vulnerabilities

2 known vulnerabilities in branch-names from Tj-actions. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  branch-names: Improper Neutralization of Special Elements used in a Command

  CVE-2025-54416Jul 26, 2025Tj-actions

  tj-actions/branch-names is a Github actions repository that contains workflows to retrieve branch or tag names with support for all events. In versions 8.2.1 and below, a critical vulnerability has been identified in the tj-actions/branch-names' GitHub Action

• 9.8 Critical severity

  tj-actions/branch-names is a Github action to retrieve branch or tag names with support for…

  CVE-2023-49291Dec 5, 2023Tj-actionsEPSS 1.45%

  tj-actions/branch-names is a Github action to retrieve branch or tag names with support for all events. The `tj-actions/branch-names` GitHub Actions improperly references the `github.event.pull_request.head.ref` and `github.head_ref` context variables within a