https://db.gcve.eu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 19 May 2026 00:02:58 +0000 https://db.gcve.eu/sighting/04190e4c-efb4-49b7-a810-198dab2b8f31/export {"uuid": "04190e4c-efb4-49b7-a810-198dab2b8f31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-qmg3-hpqr-gqvc", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114189869676629359", "content": "", "creation_timestamp": "2025-03-19T15:45:35.284319Z"} {"uuid": "04190e4c-efb4-49b7-a810-198dab2b8f31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-qmg3-hpqr-gqvc", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114189869676629359", "content": "", "creation_timestamp": "2025-03-19T15:45:35.284319Z"} https://db.gcve.eu/sighting/04190e4c-efb4-49b7-a810-198dab2b8f31/export Wed, 19 Mar 2025 15:45:35 +0000 https://db.gcve.eu/sighting/d678d8b9-fd12-4a02-b949-36e10c35c449/export {"uuid": "d678d8b9-fd12-4a02-b949-36e10c35c449", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-QMG3-HPQR-GQVC", "type": "seen", "source": "Telegram/1nxUJd1r2Vl_i3BcLbYFmcRkQRAx1kOCE3f---QAF-WqkIU", "content": "", "creation_timestamp": "2025-03-19T16:30:54.000000Z"} {"uuid": "d678d8b9-fd12-4a02-b949-36e10c35c449", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-QMG3-HPQR-GQVC", "type": "seen", "source": "Telegram/1nxUJd1r2Vl_i3BcLbYFmcRkQRAx1kOCE3f---QAF-WqkIU", "content": "", "creation_timestamp": "2025-03-19T16:30:54.000000Z"} https://db.gcve.eu/sighting/d678d8b9-fd12-4a02-b949-36e10c35c449/export Wed, 19 Mar 2025 16:30:54 +0000 https://db.gcve.eu/sighting/2e575005-c304-468f-93a4-dc32dda1bc34/export {"uuid": "2e575005-c304-468f-93a4-dc32dda1bc34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-QMG3-HPQR-GQVC", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8098", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-30154\n\ud83d\udd25 CVSS Score: 8.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N)\n\ud83d\udd39 Description: reviewdog/action-setup is a GitHub action that installs reviewdog. reviewdog/action-setup@v1 was compromised March 11, 2025, between 18:42 and 20:31 UTC, with malicious code added that dumps exposed secrets to Github Actions Workflow Logs. Other reviewdog actions that use `reviewdog/action-setup@v1` that would also be compromised, regardless of version or pinning method, are reviewdog/action-shellcheck, reviewdog/action-composite-template, reviewdog/action-staticcheck, reviewdog/action-ast-grep, and reviewdog/action-typos.\n\ud83d\udccf Published: 2025-03-19T15:15:29.113Z\n\ud83d\udccf Modified: 2025-03-19T16:21:02.390Z\n\ud83d\udd17 References:\n1. https://github.com/reviewdog/reviewdog/security/advisories/GHSA-qmg3-hpqr-gqvc\n2. https://github.com/reviewdog/reviewdog/issues/2079\n3. https://github.com/reviewdog/action-setup/commit/3f401fe1d58fe77e10d665ab713057375e39b887\n4. https://github.com/reviewdog/action-setup/commit/f0d342d24037bb11d26b9bd8496e0808ba32e9ec\n5. https://www.wiz.io/blog/new-github-action-supply-chain-attack-reviewdog-action-setup", "creation_timestamp": "2025-03-19T17:21:01.000000Z"} {"uuid": "2e575005-c304-468f-93a4-dc32dda1bc34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-QMG3-HPQR-GQVC", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8098", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-30154\n\ud83d\udd25 CVSS Score: 8.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N)\n\ud83d\udd39 Description: reviewdog/action-setup is a GitHub action that installs reviewdog. reviewdog/action-setup@v1 was compromised March 11, 2025, between 18:42 and 20:31 UTC, with malicious code added that dumps exposed secrets to Github Actions Workflow Logs. Other reviewdog actions that use `reviewdog/action-setup@v1` that would also be compromised, regardless of version or pinning method, are reviewdog/action-shellcheck, reviewdog/action-composite-template, reviewdog/action-staticcheck, reviewdog/action-ast-grep, and reviewdog/action-typos.\n\ud83d\udccf Published: 2025-03-19T15:15:29.113Z\n\ud83d\udccf Modified: 2025-03-19T16:21:02.390Z\n\ud83d\udd17 References:\n1. https://github.com/reviewdog/reviewdog/security/advisories/GHSA-qmg3-hpqr-gqvc\n2. https://github.com/reviewdog/reviewdog/issues/2079\n3. https://github.com/reviewdog/action-setup/commit/3f401fe1d58fe77e10d665ab713057375e39b887\n4. https://github.com/reviewdog/action-setup/commit/f0d342d24037bb11d26b9bd8496e0808ba32e9ec\n5. https://www.wiz.io/blog/new-github-action-supply-chain-attack-reviewdog-action-setup", "creation_timestamp": "2025-03-19T17:21:01.000000Z"} https://db.gcve.eu/sighting/2e575005-c304-468f-93a4-dc32dda1bc34/export Wed, 19 Mar 2025 17:21:01 +0000 https://db.gcve.eu/sighting/28ca0dcd-1c75-4e32-9a5d-0d4538759e3a/export {"uuid": "28ca0dcd-1c75-4e32-9a5d-0d4538759e3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-qmg3-hpqr-gqvc", "type": "seen", "source": "https://bsky.app/profile/azu.bsky.social/post/3lkxgn7bm5s26", "content": "", "creation_timestamp": "2025-03-22T09:39:39.610898Z"} {"uuid": "28ca0dcd-1c75-4e32-9a5d-0d4538759e3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-qmg3-hpqr-gqvc", "type": "seen", "source": "https://bsky.app/profile/azu.bsky.social/post/3lkxgn7bm5s26", "content": "", "creation_timestamp": "2025-03-22T09:39:39.610898Z"} https://db.gcve.eu/sighting/28ca0dcd-1c75-4e32-9a5d-0d4538759e3a/export Sat, 22 Mar 2025 09:39:39 +0000 https://db.gcve.eu/sighting/7b2a792f-8564-4e71-a782-a3209c7f18ab/export {"uuid": "7b2a792f-8564-4e71-a782-a3209c7f18ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-QMG3-HPQR-GQVC", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8569", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-30154\n\ud83d\udd25 CVSS Score: 8.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N)\n\ud83d\udd39 Description: reviewdog/action-setup is a GitHub action that installs reviewdog. reviewdog/action-setup@v1 was compromised March 11, 2025, between 18:42 and 20:31 UTC, with malicious code added that dumps exposed secrets to Github Actions Workflow Logs. Other reviewdog actions that use `reviewdog/action-setup@v1` that would also be compromised, regardless of version or pinning method, are reviewdog/action-shellcheck, reviewdog/action-composite-template, reviewdog/action-staticcheck, reviewdog/action-ast-grep, and reviewdog/action-typos.\n\ud83d\udccf Published: 2025-03-19T15:15:29.113Z\n\ud83d\udccf Modified: 2025-03-24T22:20:22.752Z\n\ud83d\udd17 References:\n1. https://github.com/reviewdog/reviewdog/security/advisories/GHSA-qmg3-hpqr-gqvc\n2. https://github.com/reviewdog/reviewdog/issues/2079\n3. https://github.com/reviewdog/action-setup/commit/3f401fe1d58fe77e10d665ab713057375e39b887\n4. https://github.com/reviewdog/action-setup/commit/f0d342d24037bb11d26b9bd8496e0808ba32e9ec\n5. https://www.wiz.io/blog/new-github-action-supply-chain-attack-reviewdog-action-setup", "creation_timestamp": "2025-03-24T23:23:29.000000Z"} {"uuid": "7b2a792f-8564-4e71-a782-a3209c7f18ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-QMG3-HPQR-GQVC", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8569", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-30154\n\ud83d\udd25 CVSS Score: 8.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N)\n\ud83d\udd39 Description: reviewdog/action-setup is a GitHub action that installs reviewdog. reviewdog/action-setup@v1 was compromised March 11, 2025, between 18:42 and 20:31 UTC, with malicious code added that dumps exposed secrets to Github Actions Workflow Logs. Other reviewdog actions that use `reviewdog/action-setup@v1` that would also be compromised, regardless of version or pinning method, are reviewdog/action-shellcheck, reviewdog/action-composite-template, reviewdog/action-staticcheck, reviewdog/action-ast-grep, and reviewdog/action-typos.\n\ud83d\udccf Published: 2025-03-19T15:15:29.113Z\n\ud83d\udccf Modified: 2025-03-24T22:20:22.752Z\n\ud83d\udd17 References:\n1. https://github.com/reviewdog/reviewdog/security/advisories/GHSA-qmg3-hpqr-gqvc\n2. https://github.com/reviewdog/reviewdog/issues/2079\n3. https://github.com/reviewdog/action-setup/commit/3f401fe1d58fe77e10d665ab713057375e39b887\n4. https://github.com/reviewdog/action-setup/commit/f0d342d24037bb11d26b9bd8496e0808ba32e9ec\n5. https://www.wiz.io/blog/new-github-action-supply-chain-attack-reviewdog-action-setup", "creation_timestamp": "2025-03-24T23:23:29.000000Z"} https://db.gcve.eu/sighting/7b2a792f-8564-4e71-a782-a3209c7f18ab/export Mon, 24 Mar 2025 23:23:29 +0000