CVE-2026-24480

A flaw was found in the QGIS GitHub Actions workflow. This vulnerability allowed a remote attacker to achieve remote code execution and compromise the repository. The flaw occurred because the workflow used the pullrequesttarget trigger, which runs with the base repository's credentials, and then...

QGIS QWC2 Code Execution

The vulnerability of the graphical interface of the QGIS QWC2 web application is related to the lack of protective measures for the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...