{"items":[{"id":"CVE-2025-24362","published":"2025-01-24T18:04:45.674Z","updated":"2025-03-31T13:47:02.009Z","title":"CodeQL GitHub Action failed workflow writes GitHub PAT to debug artifacts","severity":"HIGH","score":7.1,"vendor":"github","product":"codeql-action","kev":false,"epss":0.01236,"kevAdded":null,"exploit":false},{"id":"CVE-2021-32638","published":"2021-05-25T17:10:11.000Z","updated":"2024-08-03T23:25:30.983Z","title":"CodeQL runner: Command-line options that make GitHub access tokens visible to other processes are now deprecated","severity":"MEDIUM","score":4.4,"vendor":"github","product":"codeql-action","kev":false,"epss":0.004,"kevAdded":null,"exploit":false}]}