المحارب🏆🇦🇪🇪🇬@nike49424
CVE-2025-5890 | GitHub Advisory Database PR #10291 Securing supply chain from UAE 🇦🇪 https://github.com/github/advisory-database/pull/10291 #GHSA #CVE #infosec
0000024
49 followersView on X
CVE-2025-5890
LOWCVSS 5.3 · MEDIUMSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability classified as problematic has been found in actions toolkit 0.5.0. This affects the function globEscape of the file toolkit/packages/glob/src/internal-pattern.ts of the component glob. The manipulation leads to inefficient regular expression complexity. It is possible to initiate the attack remotely.
0.0/ 10 priority
Sources & remediation
Other references
Weakness type (CWE)
CWE-400CWE-1333
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Threat summary
- 1 mentions across 1 observed day
What's happening
- 1 total mentions across 1 day