Skip to content

fix: Stored XSS via malformed Content-Type bypassing file upload extension blocklist (GHSA-r899-h629-j84r) #11269

fix: Stored XSS via malformed Content-Type bypassing file upload extension blocklist (GHSA-r899-h629-j84r)

fix: Stored XSS via malformed Content-Type bypassing file upload extension blocklist (GHSA-r899-h629-j84r) #11269

Re-run triggered June 25, 2026 00:10
Status Failure
Total duration 7m 35s
Artifacts

ci.yml

on: pull_request
Node Engine Check
31s
Node Engine Check
Lint
38s
Lint
Check Definitions
28s
Check Definitions
Circular Dependencies
30s
Circular Dependencies
Docker Build
5m 59s
Docker Build
NPM Lock File Version
9s
NPM Lock File Version
Check Types
28s
Check Types
Matrix: Code Analysis
Matrix: check-mongo
Matrix: check-postgres
Fit to window
Zoom out
Zoom in

Annotations

1 error and 3 warnings
MongoDB 7, ReplicaSet
Process completed with exit code 3.
Redis Cache
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/checkout@v4, actions/setup-node@v4, codecov/codecov-action@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Node 18
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/checkout@v4, actions/setup-node@v4, codecov/codecov-action@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
MongoDB 7, ReplicaSet
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/checkout@v4, actions/setup-node@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/