Advisories · Technology

github codeql-action.

Every CVE that names github codeql-action among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-24362 CVE record

CVSS 7.1 High

CodeQL GitHub Action failed workflow writes GitHub PAT to debug artifacts
- github codeql-action
- Information disclosure
Not analysed yet 24 Jan 2025
CVE-2021-32638 CVE record

CVSS 4.4 Medium

CodeQL runner: Command-line options that make GitHub access tokens visible to other processes are now deprecated
- github codeql-action
- Information disclosure
- CWE-214
Not analysed yet 25 May 2021