Action Composite Template
Approved changes feed: RSS · Atom
cpe:2.3:a:reviewdog:action-composite-template:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Reviewdog (67c03804-22fd-5706-8079-f9bd897898cd) |
|---|---|
| Product | Action Composite Template (7fe30765-6d1a-551a-97e8-5bb0a79265bd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/reviewdog/action-composite-template |
purl2cpe | 2026-06-01 10:14:49.310441 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-30154 |
vulnerable | 2026-06-08 07:16:59.136940 |
Multiple Reviewdog actions were compromised during a specific time period
HIGH (8.6)
reviewdog/action-setup is a GitHub action that installs reviewdog. reviewdog/action-setup@v1 was compromised March 11, 2025, between 18:42 and 20:31 UTC, with malicious code added that dumps exposed secrets to Github Actions Workflow Logs. Other reviewdog actions that use `reviewdog/action-setup@v1` that would also be compromised, regardless of version or pinning method, are reviewdog/action-shellcheck, reviewdog/action-composite-template, reviewdog/action-staticcheck, reviewdog/action-ast-grep, and reviewdog/action-typos.
Published: 2025-03-19T15:15:29.113Z
Updated: 2026-02-26T19:09:21.840Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.