Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
GitHub Actions devalue could be exploited
published 18 days ago
Summary
The devalue component used in GitHub Actions had a security weakness that might let an attacker run unwanted code or gain unauthorized access. The issue has been fixed in the updated version 4.3.3-tuxcare.7. Apply this update as soon as possible to keep your workflows secure.
What to do
- Update GitHub Actions devalue to version 4.3.3-tuxcare.7.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | GitHub Actions | devalue |
>= 4.3.3-tuxcare.0, < 4.3.3-tuxcare.7 Fix: upgrade to 4.3.3-tuxcare.7
|
Original advisory text
TuxCare security update for devalue (1 CVE)
TuxCare rebuilt devalue to address 1 CVE. Fixed in 4.3.3-tuxcare.7.
Timeline
Published17 Oct 2026
Updated17 Oct 2026
First seen17 Oct 2026
Sources
CLSA-2026-1792231253 · OSV
Track software like this
Free during beta