boxscore/security
CVE · referencelatest edition

Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2025-30154AWAITING ENRICHMENT
reviewdog action-setup GitHub Action
  CVSS   EPSS    %ile   KEV
  —      .0239   82.7   YES
AFFECTED
  Product                     Versions     Fixed
  action-setup GitHub Action  unspecified  —
TIMELINE
  Mar 24  Added to CISA KEV, remediation due 2025-04-14
  Mar 24  Published
0 references · KEV due April 14, 2025

Lifecycle

Complete event history — 2 events, chronological
DateEventDetail
March 24, 2025KEV ADDEDAdded to CISA KEV, remediation due 2025-04-14
March 24, 2025PublishedPublished

Affected

Affected products and packages — 1 row
VendorProduct / PackageEcosystemVersion introducedFixed
reviewdogaction-setup GitHub Action

References

No references recorded.

Related

Authoritative record: CVE-2025-30154 at cve.org

Vendors: reviewdog

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2025-30154 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.