Known vulnerabilities in github codeql-action
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-24362 | In some circumstances, debug artifacts uploaded by the CodeQL Action after a failed code scanning workflow run may… | 7.1 High | Jan 24, 2025 |
| CVE-2021-32638 | Github's CodeQL action is provided to run CodeQL-based code scanning on non-GitHub CI/CD systems and requires a GitHub… | 4.4 Medium | May 25, 2021 |