Critical GitHub Actions package vulnerabilities
The Beam CVE database tracks 9 critical package advisories for GitHub Actions: 9 critical severity. 1 is known to be exploited (CISA KEV). The newest is CVE-2026-55158, published Aug 17, 2026 and fixed in 1.2.1.
Critical-severity advisories for GitHub Actions packages from the GitHub Advisory Database, published since 2024. AI coding agents install packages on their own, so a vulnerable or malicious dependency can reach a project without a human picking it. Advisories for AI tools themselves are listed under each tool.
- Vulnerabilities tracked
- 9
- Critical
- 9
- Known exploited (CISA KEV)
- 1
- Published in the last 30 days
- 0
All entries, newest first
CVE-2026-55158 · GitHub Actions
conflibot vulnerable to command injection via crafted pull request branch names under pull_request_target
critical9.1Aug 17, 2026CVE-2026-34243 · GitHub Actions
wenxian: Command Injection in GitHub Actions Workflow via `issue_comment.body`
critical9.8No fixMar 29, 2026CVE-2026-33634 · Go
Trivy ecosystem supply chain was briefly compromised
critical9.4ExploitedNo fixMar 24, 2026GHSA-f67f-hcr6-94mf · GitHub Actions
Zen-AI-Pentest has Shell Injection via untrusted issue title in ZenClaw Discord Integration workflow
critical10.0No fixMar 20, 2026CVE-2026-31976 · GitHub Actions
xygeni-action v5 tag poisoned with C2 backdoor
critical9.3Mar 11, 2026GHSA-pwf7-47c3-mfhx · GitHub Actions
j178/prek-action vulnerable to arbitrary code injection in composite action
critical9.9Sep 29, 2025GHSA-x6gv-2rvh-qmp6 · GitHub Actions
m00nl1ght-dev/steam-workshop-deploy: Exposure of Version-Control Repository to an Unauthorized Control Sphere and Insufficiently Protected Credentials
critical10.0Aug 13, 2025CVE-2025-54416 · GitHub Actions
tj-actions/branch-names has a Command Injection Vulnerability
critical9.1Jul 25, 2025GHSA-phf6-hm3h-x8qp · GitHub Actions
Cromwell GitHub Actions Secrets exfiltration via `Issue_comment`
critical9.1May 28, 2025