buildalon vulnerabilities

Products

• buildalon/setup-steamcmd 1

Latest buildalon CVEs

Newest publication first

1. GHSA-mj96-mh85-r574 buildalon/setup-steamcmd leaked authentication token in job output logs

   Published 2025-07-21

   High·CVSS 8.7

   Summary Log output includes authentication token that provides full account access Details The post job action prints the contents of config/config.vdf which holds the saved authentication token and can be used to sign in on another machine. This means any public use of this acti...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.