The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a vulnerability linked to the supply chain compromise of the GitHub Action, tj-actions/changed-files, to its Known Exploited Vulnerabilities (KEV) catalog. The high-severity flaw, tracked as CVE-2025-30066 (CVSS score: 8.6), involves the breach of the GitHub Action to inject malicious code that enables a remote
![]()
source https://thehackernews.com/2025/03/cisa-warns-of-active-exploitation-in.html
source https://thehackernews.com/2025/03/cisa-warns-of-active-exploitation-in.html