GitHub security advisory (AV25-148)

Serial number: AV25-148
Date: March 19, 2025

On March 15, 2025, GitHub published a security advisory to address a vulnerability in the following product:

  • tj-actions/changed-files GitHub Actions – versions 45.07 and prior

On March 18, 2025, CISA added CVE-2025-30066 to their Known Exploited Vulnerabilities (KEV) Catalog.

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

Date modified: