Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-5890

actions toolkit glob internal-pattern.ts globEscape redos

Description

A vulnerability classified as problematic has been found in actions toolkit 0.5.0. This affects the function globEscape of the file toolkit/packages/glob/src/internal-pattern.ts of the component glob. The manipulation leads to inefficient regular expression complexity. It is possible to initiate the attack remotely.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

actions toolkit

  • 0.5.0affected

References