Skip to content

fix: Stored XSS via malformed Content-Type bypassing file upload extension blocklist (GHSA-r899-h629-j84r) #11268

fix: Stored XSS via malformed Content-Type bypassing file upload extension blocklist (GHSA-r899-h629-j84r)

fix: Stored XSS via malformed Content-Type bypassing file upload extension blocklist (GHSA-r899-h629-j84r) #11268

Re-run triggered June 25, 2026 00:10
Status Success
Total duration 10m 13s
Artifacts

ci.yml

on: pull_request
Node Engine Check
32s
Node Engine Check
Lint
42s
Lint
Check Definitions
35s
Check Definitions
Circular Dependencies
39s
Circular Dependencies
Docs
36s
Docs
Docker Build
6m 17s
Docker Build
NPM Lock File Version
6s
NPM Lock File Version
Check Types
32s
Check Types
Matrix: Code Analysis
Matrix: check-mongo
Matrix: check-postgres
Fit to window
Zoom out
Zoom in

Annotations

1 warning
PostgreSQL 18, PostGIS 3.6
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/checkout@v4, actions/setup-node@v4, codecov/codecov-action@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/