VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Jun 9, 2025· Updated Apr 15, 2026

CVE-2025-5890

CVE-2025-5890

Description

A vulnerability classified as problematic has been found in actions toolkit 0.5.0. This affects the function globEscape of the file toolkit/packages/glob/src/internal-pattern.ts of the component glob. The manipulation leads to inefficient regular expression complexity. It is possible to initiate the attack remotely.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Actions/Toolkitreferences2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: = 0.5.0

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.