Critical flaw in tj-actions/changed-files exposes over 23,000 GitHub repositories

A critical supply-chain attack vulnerability has been discovered in the tj-actions/changed-files software.

Published 19sem1 sourceupdated 19sem

≈ 17sSpeed

The fact

Over 23,000 GitHub repositories were exposed between March 14 and 15, 2025.

The flaw enables secret leakage and compromises targeted users.

Click the link to read an article on the topic:

Explore this topic

Révision urgente de tous les workflows GitHub utilisant cette action

Migration vers des alternatives sécurisées ou correction de la source

Auto-synthesis from 1 media source · identified on April 28, 2026