Actions core lib
93%
Total Score
64
100
100
100
100
| Title | Versions | Severity |
|---|---|---|
CVE-2022-35954 @actions/core is vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in versions 0.0.0 - 1.9.0. | 0.0.0 - 1.9.0 | Medium |
CVE-2020-15228 @actions/core is vulnerable to Improper Input Validation in versions 0.0.0 - 1.2.6. | 0.0.0 - 1.2.6 | Low |
| Dependency | Last Release | Score |
|---|---|---|
@actions/exec Version ^3.0.0 | — | — |
@actions/http-client Version ^4.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

SOC 2Compliant
ISO 27001Compliant