Skip to content
ci-performance

fix: Stored XSS via malformed Content-Type bypassing file upload extension blocklist (GHSA-r899-h629-j84r) #2300

Sign in to view logs

fix: Stored XSS via malformed Content-Type bypassing file upload extension blocklist (GHSA-r899-h629-j84r)

fix: Stored XSS via malformed Content-Type bypassing file upload extension blocklist (GHSA-r899-h629-j84r) #2300

Triggered via pull request June 24, 2026 23:45
@mtrezzamtrezza
synchronize #10521
mtrezza:fix/GHSA-r899-h629-j84r-v9
Status Success
Total duration 17m 6s
Artifacts 3

ci-performance.yml

on: pull_request
Benchmarks
17m 2s
Benchmarks
Fit to window
Zoom out
Zoom in

Annotations

1 warning
Benchmarks
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-node@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
baseline-benchmark Expired
3.88 KB
sha256:dffb9fd807c49bfbefd4a7e1222dba04c797e73f7a7f6c009348a7f9ccf1d41d
benchmark-comparison Expired
613 Bytes
sha256:7406d0e4023c1778bb72958760374ee5c1f5f7c10d62e6702720a38f0f029970
pr-benchmark Expired
3.89 KB
sha256:dd0df1a69c7b5842c768e23eb162eb66813738962c00e47f3bf7eede54b34d7f